From:             dkh-php at nighttide dot net
Operating system: FreeBSD 4.8-STABLE
PHP version:      4.3.2
PHP Bug Type:     *Web Server problem
Bug description:  .htaccess php var overides not being cleared between page requests 

Description:
------------
FreeBSD 4.8-STABLE
Apache 2.0.46
PHP 4.3.2 

PHP being used as module.

User 1 creates an .htaccess file in their dir at
/home/user1/WWW/sub/.htaccess. This file contains php var overides for
auto_prepend_file, auto_append_file, include_path etc.

User 2 has a simple index.php file - html tag, body tag, single text line
followed by a php invocation of phpinfo (happens with other pages as well)
then closing tags. No .htaccess file here.

User 1 stuff in /home/user1/WWW/sub/index.php works as expected

User 2 stuff in /home/user2/WWW/index.php, if loaded immediately after
/home/user1/WWW/sub/index.php will see User 1's auto_prepend_file and
auto_append_file. The local values from the phpinfo invocation shows User
2's overrides.

Appears as if the apache session (or thread?) that serviced the first
request, doesn't clear out the local overrides before handling a new
request. Potentially dangerous.



-- 
Edit bug report at http://bugs.php.net/?id=24248&edit=1
-- 
Try a CVS snapshot:         http://bugs.php.net/fix.php?id=24248&r=trysnapshot
Fixed in CVS:               http://bugs.php.net/fix.php?id=24248&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=24248&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=24248&r=needtrace
Try newer version:          http://bugs.php.net/fix.php?id=24248&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=24248&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=24248&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=24248&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=24248&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=24248&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=24248&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=24248&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=24248&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=24248&r=gnused

Reply via email to