What is session_save_path?
session_save_path() sets or returns the path where data for the current session is saved.If you pass no arguments into a function, it returns the current directory where session files are stored.
To Get default Session Path
By default, PHP stores session data in files and files are stored in the /tmp directory of your server.Each session is stored in its own file.
session data file stored in /tmp is like sess_1f1b1bdb809709f09f45b049998f25dc43745a67.
session_save_path function returns the current session save path.If session_save_path() function returns null,then session.save_path is commented in your php.ini file.
So Uncomment session.save_path in a php.ini and set path in it.Let’s have a look
session.save_path = "C:\WINDOWS\Temp"
To Change Session Save Path
To change the default path of stored session, you can use same function session_save_path( ) but with the parameter which is the path of the new directory where you session files will be stored but you need to call this function before accessing any session variables like session_start();
NOTE:If sessions are not working or are giving errors, check the pathname returned by session_save_path() function and make sure that path exists and writable.
This simple change can greatly improve the security of the sessions stored in files because we are storing it in custom directory for application so it is Securing Session Storage
Couple of articles, you may like: