diff --git a/upload/system.php b/upload/system.php
index 4827241..3a22a3e 100644
--- a/upload/system.php
+++ b/upload/system.php
@@ -2,8 +2,6 @@
 
 if(!defined("MCR")){ exit("Hacking Attempt!"); }
 
-if(!session_start()){ session_start(); }
-
 ini_set("upload_max_filesize", "50M");
 ini_set("post_max_size", "50M");
 
@@ -20,6 +18,9 @@
 define('MCR_SKIN_PATH', MCR_UPL_PATH.'skins/');
 define('MCR_CLOAK_PATH', MCR_UPL_PATH.'cloaks/');
 
+session_save_path(MCR_UPL_PATH.'tmp');
+if(!session_start()){ session_start(); }
+
 // Set default charset
 header('Content-Type: text/html; charset=UTF-8');
 
@@ -48,4 +49,4 @@
 
 // Csrf security validation
 $core->csrf_check();
-?>
\ No newline at end of file
+?>