From: [EMAIL PROTECTED] Operating system: All PHP version: 4.1.1 PHP Bug Type: MySQL related Bug description: safe_mode wrappers fail for MySQL (other exts?)
A message was posted at bugtraq earlier about a problem with safe_mode and the mysql-library used. the message is available here: http://www.orakel.ntnu.no/~matslin/php4_safe_mode.txt I searched the bugdb, but the bug doesnt not seem to be reported. As the author says in the mail, this may be a problem with other extensions as well. As far as i can see, this could probably be fixed in the send_file_to_server-function in libmysql.c, more specific somewhere around line 1776 (there is also some mention about this in the mail). The 'bug' makes it possible to read all files readable for php, even if its running in safe mode, basedir-restrictions etc. More info in the mail. -- Edit bug report at http://bugs.php.net/?id=15375&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=15375&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=15375&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=15375&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=15375&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=15375&r=support Expected behavior: http://bugs.php.net/fix.php?id=15375&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=15375&r=notenoughinfo -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php
