ID: 20377
Comment by: sim_job at yahoo dot com
Reported By: davey at its-explosive dot net
Status: Verified
Bug Type: PHP options/info functions
Operating System: All
PHP Version: 4.3.0-pre2
New Comment:
Re. the painful open_basedir issue ... Has anyone
looked at the php source code regarding the path(s)
involved in how the engine was looking up the
open_basedir? Looking at it, it kinda looked like the
php_value for include_path and open_basedir were
looking one child dir too deep upon init ...
Also, I have to say that _not_ classifying this as a
bug (has anyone looked at google lately re.
"open_basedir restriction") is not the right way to
look at this ... It's a great idea, but it needs
improvement in the source code ... set it dynamically
via the engine to whatever vhosts are being included,
user opts out via .htaccess php_value ... that way all
the old code doesn't break ...
Previous Comments:
------------------------------------------------------------------------
[2002-11-16 00:57:29] [EMAIL PROTECTED]
I'm reclassifying this and changing to other bug we found
when digging into this mess.. :)
If you set some directive in httpd.conf with php_admin_value
it's not possible to change it anymore in .htaccess. This is okay and
the correct behaviour. BUT it does not make PHP_INI_ALL settings not
settable with ini_set() though.
To test this:
httpd.conf:
php_admin_value html_errors 0
.htaccess:
php_value html_errors 1
test.php:
<?php
/* Comment this line out to see the effect of .htaccess..*/
ini_set('html_errors', 1);
phpinfo();
?>
------------------------------------------------------------------------
[2002-11-15 22:23:43] davey at its-explosive dot net
/me points to php_admin_flag and php_admin_value
- Davey
------------------------------------------------------------------------
[2002-11-15 21:25:35] [EMAIL PROTECTED]
".htaccess also falls in the PERDIR class, and it's not a
good idea to allow setting open_basedir and the other settings from
this file especially for ISPs and stuff. --derick "
------------------------------------------------------------------------
[2002-11-11 20:15:05] davey at its-explosive dot net
this is a feature I've put a lot of thought into and I really think
webhosts specifically will benefit from this feature.
It's basically allowing certain ini directives to be set using
php_admin_flag/value on a virtualhost basis.
The config options I think should be modified are these:
open_basedir
session.save_path
upload_tmp_dir
auto_prepend_file
auto_append_file
I don't know whats involved in changing these, but I would assume it's
not a major change. I would love to see this in the forthcoming 4.3
release...
- Davey
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=20377&edit=1
