Edit report at https://bugs.php.net/bug.php?id=62037&edit=1
ID: 62037 Updated by: s...@php.net Reported by: karlis dot kisis at gmail dot com Summary: .user.ini ignores open_basedir parameter -Status: Open +Status: Feedback Type: Bug Package: Safe Mode/open_basedir Operating System: CentOS 6.2 x86_64 PHP Version: 5.3.13 Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2012-05-15 15:17:13] reeze dot xia at gmail dot com Please refer: http://cn.php.net/manual/en/ini.core.php#ini.open-basedir âAs of PHP 5.3.0 open_basedir can be tightened at run-timeâ This means you can only make the path more deep but can't move back. if not there will be security problem. Maybe this is your problem ------------------------------------------------------------------------ [2012-05-15 15:01:40] karlis dot kisis at gmail dot com turns out that if the master value for open_basedir is None, then .user.ini value works! seems that .user.ini cannot override the master value from php.ini if open_basedir is defined. still a bug in my opinion. ------------------------------------------------------------------------ [2012-05-15 14:33:52] karlis dot kisis at gmail dot com Description: ------------ open_basedir parameter is ignored in .user.ini: max_input_time = 333 open_basedir = "/home" display_errors = On include_path = "/home" the rest of the parameters from above work fine. php is run as fcgi on apache 2.2.22 with mod_fcgid.c. according to the docs, open_basedir should be configurable anywhere since version 5.3 Test script: --------------- changed parameters are shown in phpinfo(), except open_basedir which remains unchanged. Expected result: ---------------- open_basedir setting from .user.ini to be in effect. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=62037&edit=1
