#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: The 2 versions are not working at the same time. Previous Comments: [2007-03-12 09:42:31] [EMAIL PROTECTED] Two different apaches in one server root? How did you manage to do that? [2007-03-10 20:32:45] priappub at yahoo dot fr The self-compiled apache: [EMAIL PROTECTED] bin]# ./httpd -V Server version: Apache/2.0.59 Server built: Feb 22 2007 00:29:21 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/logs/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/logs/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" [2007-03-09 23:37:38] [EMAIL PROTECTED] Well, then provide the one from the self-compiled apache. ---------------- [2007-03-09 16:09:31] priappub at yahoo dot fr This is the httpd -V from apache provided by SUN. [2007-03-09 10:40:27] [EMAIL PROTECTED] And the same for Sun apache, please. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/40425 -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: The self-compiled apache: [EMAIL PROTECTED] bin]# ./httpd -V Server version: Apache/2.0.59 Server built: Feb 22 2007 00:29:21 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/logs/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/logs/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" Previous Comments: [2007-03-09 23:37:38] [EMAIL PROTECTED] Well, then provide the one from the self-compiled apache. ---------------- [2007-03-09 16:09:31] priappub at yahoo dot fr This is the httpd -V from apache provided by SUN. [2007-03-09 10:40:27] [EMAIL PROTECTED] And the same for Sun apache, please. ---------------- [2007-03-08 22:32:38] priappub at yahoo dot fr For the difference, I don't know... I have this: [EMAIL PROTECTED] ~]# /usr/apache2/bin/httpd -V Server version: Apache/2.0.58 Server built: Sep 5 2006 07:46:49 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/run/apache2/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" [2007-03-07 10:19:42] [EMAIL PROTECTED] What's the difference between Sun Apache and the one compiled from sources? The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/40425 -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: This is the httpd -V from apache provided by SUN. Previous Comments: [2007-03-09 10:40:27] [EMAIL PROTECTED] And the same for Sun apache, please. [2007-03-08 22:32:38] priappub at yahoo dot fr For the difference, I don't know... I have this: [EMAIL PROTECTED] ~]# /usr/apache2/bin/httpd -V Server version: Apache/2.0.58 Server built: Sep 5 2006 07:46:49 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/run/apache2/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" [2007-03-07 10:19:42] [EMAIL PROTECTED] What's the difference between Sun Apache and the one compiled from sources? ------------ [2007-03-07 10:13:40] priappub at yahoo dot fr Same problem with the snapshot. But it seems that the problem is the apache provided by SUN because if I compile apache from the source, safe_mode is OK. [2007-03-06 12:07:54] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/40425 -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: For the difference, I don't know... I have this: [EMAIL PROTECTED] ~]# /usr/apache2/bin/httpd -V Server version: Apache/2.0.58 Server built: Sep 5 2006 07:46:49 Server's Module Magic Number: 20020903:12 Server loaded: APR 0.9.12, APR-UTIL 0.9.12 Compiled using: APR 0.9.12, APR-UTIL 0.9.12 Architecture: 32-bit Server compiled with -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_FCNTL_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/usr/apache2" -D SUEXEC_BIN="/usr/apache2/bin/suexec" -D DEFAULT_PIDLOG="/var/run/apache2/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" Previous Comments: [2007-03-07 10:19:42] [EMAIL PROTECTED] What's the difference between Sun Apache and the one compiled from sources? ------------ [2007-03-07 10:13:40] priappub at yahoo dot fr Same problem with the snapshot. But it seems that the problem is the apache provided by SUN because if I compile apache from the source, safe_mode is OK. [2007-03-06 12:07:54] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip [2007-02-11 09:34:03] [EMAIL PROTECTED] Then we will have to wait for someone with Solaris 10 to reproduce and fix it. ------------ [2007-02-10 01:35:19] priappub at yahoo dot fr Unfortunately, this machine is on a private network. It'a a solaris 10 update 3 with apache 2.0.58 included in solaris. PHP is 5.2.1 compiled with: CFLAGS='-I/usr/sfw/src/mysql/include' \ CC='cc' \ './configure' \ '--with-apxs2=/usr/apache2/bin/apxs' \ '--with-mysql=/usr/sfw' \ '--enable-dbase' \ '--with-ldap' \ '--enable-ftp' \ '--with-bzip2' \ '--with-openssl=/usr/sfw' \ '--with-jepg' \ '--with-png' \ '--with-zlib' \ '--with-imap' \ '--enable-fastcgi' \ '--enable-mbstring' \ '--with-config-file-path=/etc/apache2' \ '--without-iconv' \ '--with-gettext' \ '--enable-magic-quotes' \ '--enable-safe-mode' \ '--prefix=/usr' \ '--exec-prefix=/usr' \ '--sysconfdir=/etc' \ '--localstatedir=/var' \ I'm using Sun Studio 11 but same result with GCC. I don't know if the problem is on x86 too, I have only solaris with sparc. NB: bug 12683 suggests a problem with mod_perl but no mod_perl here. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/40425 -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: Same problem with the snapshot. But it seems that the problem is the apache provided by SUN because if I compile apache from the source, safe_mode is OK. Previous Comments: [2007-03-06 12:07:54] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip [2007-02-11 09:34:03] [EMAIL PROTECTED] Then we will have to wait for someone with Solaris 10 to reproduce and fix it. [2007-02-10 01:35:19] priappub at yahoo dot fr Unfortunately, this machine is on a private network. It'a a solaris 10 update 3 with apache 2.0.58 included in solaris. PHP is 5.2.1 compiled with: CFLAGS='-I/usr/sfw/src/mysql/include' \ CC='cc' \ './configure' \ '--with-apxs2=/usr/apache2/bin/apxs' \ '--with-mysql=/usr/sfw' \ '--enable-dbase' \ '--with-ldap' \ '--enable-ftp' \ '--with-bzip2' \ '--with-openssl=/usr/sfw' \ '--with-jepg' \ '--with-png' \ '--with-zlib' \ '--with-imap' \ '--enable-fastcgi' \ '--enable-mbstring' \ '--with-config-file-path=/etc/apache2' \ '--without-iconv' \ '--with-gettext' \ '--enable-magic-quotes' \ '--enable-safe-mode' \ '--prefix=/usr' \ '--exec-prefix=/usr' \ '--sysconfdir=/etc' \ '--localstatedir=/var' \ I'm using Sun Studio 11 but same result with GCC. I don't know if the problem is on x86 too, I have only solaris with sparc. NB: bug 12683 suggests a problem with mod_perl but no mod_perl here. ------------ [2007-02-10 00:52:28] [EMAIL PROTECTED] Cannot reproduce. Please provide an account on this machine. [2007-02-10 00:44:39] priappub at yahoo dot fr Description: On solaris 10 (update 3) on sparc with PHP 5.1.6 or 5.1.2, safe mode doesn't work. I have the message: SAFE MODE Restriction in effect. The script whose uid/gid is 1/10076 is not allowed to access /sites/toto.php owned by uid/gid 10076/1000 in Unknown on line 0 The script and the directory have the same UID/GID. It seems like in safe_mode.c, php-getuid() always returns 1 and php_getgid() returns the UID. NB: same bug as http://bugs.php.net/bug.php?id=7744 or http://bugs.php.net/bug.php?id=18500 (they are old and for PHP4) -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [Fbk->Opn]: php_getuid() always return 1.
ID: 40425 User updated by: priappub at yahoo dot fr Reported By: priappub at yahoo dot fr -Status: Feedback +Status: Open Bug Type: Safe Mode/open_basedir Operating System: Solaris 10 PHP Version: 5.2.1 New Comment: Unfortunately, this machine is on a private network. It'a a solaris 10 update 3 with apache 2.0.58 included in solaris. PHP is 5.2.1 compiled with: CFLAGS='-I/usr/sfw/src/mysql/include' \ CC='cc' \ './configure' \ '--with-apxs2=/usr/apache2/bin/apxs' \ '--with-mysql=/usr/sfw' \ '--enable-dbase' \ '--with-ldap' \ '--enable-ftp' \ '--with-bzip2' \ '--with-openssl=/usr/sfw' \ '--with-jepg' \ '--with-png' \ '--with-zlib' \ '--with-imap' \ '--enable-fastcgi' \ '--enable-mbstring' \ '--with-config-file-path=/etc/apache2' \ '--without-iconv' \ '--with-gettext' \ '--enable-magic-quotes' \ '--enable-safe-mode' \ '--prefix=/usr' \ '--exec-prefix=/usr' \ '--sysconfdir=/etc' \ '--localstatedir=/var' \ I'm using Sun Studio 11 but same result with GCC. I don't know if the problem is on x86 too, I have only solaris with sparc. NB: bug 12683 suggests a problem with mod_perl but no mod_perl here. Previous Comments: ------------ [2007-02-10 00:52:28] [EMAIL PROTECTED] Cannot reproduce. Please provide an account on this machine. [2007-02-10 00:44:39] priappub at yahoo dot fr Description: On solaris 10 (update 3) on sparc with PHP 5.1.6 or 5.1.2, safe mode doesn't work. I have the message: SAFE MODE Restriction in effect. The script whose uid/gid is 1/10076 is not allowed to access /sites/toto.php owned by uid/gid 10076/1000 in Unknown on line 0 The script and the directory have the same UID/GID. It seems like in safe_mode.c, php-getuid() always returns 1 and php_getgid() returns the UID. NB: same bug as http://bugs.php.net/bug.php?id=7744 or http://bugs.php.net/bug.php?id=18500 (they are old and for PHP4) -- Edit this bug report at http://bugs.php.net/?id=40425&edit=1
#40425 [NEW]: php_getuid() always return 1.
From: priappub at yahoo dot fr Operating system: Solaris 10 PHP version: 5.2.1 PHP Bug Type: Safe Mode/open_basedir Bug description: php_getuid() always return 1. Description: On solaris 10 (update 3) on sparc with PHP 5.1.6 or 5.1.2, safe mode doesn't work. I have the message: SAFE MODE Restriction in effect. The script whose uid/gid is 1/10076 is not allowed to access /sites/toto.php owned by uid/gid 10076/1000 in Unknown on line 0 The script and the directory have the same UID/GID. It seems like in safe_mode.c, php-getuid() always returns 1 and php_getgid() returns the UID. NB: same bug as http://bugs.php.net/bug.php?id=7744 or http://bugs.php.net/bug.php?id=18500 (they are old and for PHP4) -- Edit bug report at http://bugs.php.net/?id=40425&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=40425&r=trysnapshot44 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=40425&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=40425&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=40425&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=40425&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=40425&r=needtrace Need Reproduce Script:http://bugs.php.net/fix.php?id=40425&r=needscript Try newer version:http://bugs.php.net/fix.php?id=40425&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=40425&r=support Expected behavior:http://bugs.php.net/fix.php?id=40425&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=40425&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=40425&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=40425&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=40425&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=40425&r=dst IIS Stability:http://bugs.php.net/fix.php?id=40425&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=40425&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=40425&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=40425&r=nozend MySQL Configuration Error:http://bugs.php.net/fix.php?id=40425&r=mysqlcfg
#18500 [Com]: Safe mode: php reports wrong uid on file
ID: 18500 Comment by: priappub at yahoo dot fr Reported By: b dot courtin at t-online dot net Status: No Feedback Bug Type: PHP options/info functions Operating System: Solaris 2.8 PHP Version: 4.2.1 New Comment: On Solaris 10 (11/06) with apache 2.0.58 and PHP 5.1.6, I have the same problem. It seems like php_getuid() returns 1 instead of the UID of the script. Previous Comments: [2003-11-10 12:11:30] ksvee at usit dot uio dot no I still experience this bug for php-4.3.4/apache-1.3.29. It seems to have been fixed in 4.2.3 (as this is the only newer version of PHP that works for us on Solaris 8 (SunOS Release 5.8)) and reintroduced in 4.3.X. From 4.3.0 through 4.3.4 this persists. The snapshots tested gave no different results to the releases. On linux (RedHat 7.3 through 9) this has never been a problem. We use a non-standard setup, but have the same configure parameters on both architectures (with the exeption of compiler used; gcc on linux, cc on solaris). I've tried using "--with-apxs=/path/to/apxs --prefix=/path/to/prefix" as the only options to configure to no avail. Errormessage from tests today (php-4.3.4 release), using the above options to configure: PHP Warning: Unknown(): SAFE MODE Restriction in effect. The script whose uid is 1 is not allowed to access /full/path/to/script.php owned by uid 0 in Unknown on line 0 >From php.ini: safe_mode = On 'script.php' is owned by root, so what bothers me is that it at one point finds that the running script (script.php) has uid=1, and at another finds it to be uid=0 (which is correct as fileowner=root => uid=0). Changing owner of script.php does nothing (except getting another uid in the error.log), unless that user has uid=1. In script.php i do an fopen() on 'file.txt'. After doing a 'chmod 1 script.php' the script executes, but I get the same errormessage (followed by a PHP Warning that fopen failed) unless I also do a chmod on file.txt. When both files have uid=1, the script works. Rgds, Kenneth Svee [2003-02-26 18:48:15] rohan at cs dot rmit dot edu dot au Another comment, also looks related to 12683, I also have compiled in mod_perl 1.x will try to compile without mod_perl and see what happens :) do I need to submit this as a new bug ? or will this one be re-opened ? Cheers Rohan [2003-02-26 18:39:00] rohan at cs dot rmit dot edu dot au Also suffering this bug in 4.3.1/apache 1.3.27 compiled using Sun workshop 7 on Solaris 8 Sparc exact same errors, ie reported uid always = 1 reported gid = file's uid on all file operations fopen() include etc... any progress on this ? [2002-12-30 14:28:27] westman dot 2 at osu dot edu I have been working with trying to get safe_mode to work for almost a week. I have used a number of versions for php, including the recently released 4.3.0 and all of them are giving me this same error message. I have searched the Internet (Google) as well as bugs.php.net, all to no avail. In fact, if I have safe_mode on, I am unable to include any file from ANY directory, even the cwd, unless it is owned by 1 (even though "." is enabled both in the include_path and in the safe_mode_include_dirs statements in php.ini): Warning: Unknown(): SAFE MODE Restriction in effect. The script whose uid/gid is 1/5004 is not allowed to access ./prepend.php owned by uid/gid 0/1 in Unknown on line 0 Warning: Unknown(prepend.php): failed to create stream: No such file or directory in Unknown on line 0 Warning: Unknown(): Failed opening 'prepend.php' for inclusion (include_path='.:/opt/apache/php:/opt/apache/php/lib:/opt/apache/php/inc') in Unknown on line 0 Is it possible that safe_mode just doesn't work on Solaris? [2002-11-09 01:00:07] php-bugs at lists dot php dot net No feedback was provided for this bug for over 2 weeks, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/18500 -- Edit this bug report at http://bugs.php.net/?id=18500&edit=1
