ID: 38799 Updated by: [EMAIL PROTECTED] Reported By: chrysalis at chrysalisnet dot org -Status: Open +Status: Feedback Bug Type: PHP options/info functions Operating System: freebsd 6.x and 5.x PHP Version: 4.4.4 New Comment:
What you said is just "include "/etc/passwd" displays the contents of this file". Why do you think open_basedir is even set? What is the value? Where did you set it? How did you set it? What is the value in phpinfo()? Did you check it with other files? I'll add more questions afterwards. Previous Comments: ------------------------------------------------------------------------ [2006-09-13 19:02:46] chrysalis at chrysalisnet dot org what other information do you need? its a very simple bug and easy to test, the only think I havent done that is on the how to report page is tested the cvs version. when I submitted the report I was told to add a 'brief' description of the problem so for that reason it wasnt detailed, then I was asked to provide the code that you can test with also provided and finally the php version and os version both supplied. apache version is 1.3.37 php reccomended ini file used changes were open base dir and zone optimiser and eaccelerator, however tried with both zend optimiser and eaccelerator and the behaviour remained. mysql version 4.1.x but this is just basic php code no database involved. ------------------------------------------------------------------------ [2006-09-13 08:02:35] [EMAIL PROTECTED] Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. ------------------------------------------------------------------------ [2006-09-13 01:16:30] chrysalis at chrysalisnet dot org Description: ------------ open_basedir is not working on include eg. include("/etc/passwd");, displays the appropriate denied in error log but doesnt actually block the code and can access files outside of open_basedir. Reproduce code: --------------- <? include("/etc/passwd"); ?> Expected result: ---------------- a blank page as what happens on php 5.1.5 Actual result: -------------- it displays the full contents of the /etc/passwd file. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=38799&edit=1
