#34656 [Fbk->Opn]: open_basedir restriction in effect although paths are set correctly

2005-12-13 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.1
 New Comment:

I cannot even try it.


Previous Comments:


[2005-12-13 20:16:22] [EMAIL PROTECTED]

I didn't ask you to permanently install it, I only asked you to TRY it
out and see if you can reproduce it.



[2005-12-13 18:00:44] wolfram at schlich dot org

Unfortunately it's impossible to use any other version of PHP than 4.x
on this machine :-(



[2005-12-13 17:41:53] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5.1-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.1-win32-latest.zip





[2005-11-30 15:02:53] wolfram at schlich dot org

Do you need more information?



[2005-11-25 13:27:23] wolfram at schlich dot org

just tried http://snaps.php.net/php4-STABLE-200511251208.tar.gz with
open_basedir in php.ini -- no luck:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s): (/tmp/) in
/home/sites/site15/web/write_tmp.php on line 3



The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/34656

-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [Fbk->Opn]: open_basedir restriction in effect although paths are set correctly

2005-12-13 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.1
 New Comment:

Unfortunately it's impossible to use any other version of PHP than 4.x
on this machine :-(


Previous Comments:


[2005-12-13 17:41:53] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5.1-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.1-win32-latest.zip





[2005-11-30 15:02:53] wolfram at schlich dot org

Do you need more information?



[2005-11-25 13:27:23] wolfram at schlich dot org

just tried http://snaps.php.net/php4-STABLE-200511251208.tar.gz with
open_basedir in php.ini -- no luck:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s): (/tmp/) in
/home/sites/site15/web/write_tmp.php on line 3



[2005-11-01 22:34:00] [EMAIL PROTECTED]

Does it work if you set the open_basedir in php.ini ?




[2005-11-01 15:01:35] wolfram at schlich dot org

Just tried with the freshly released 4.4.1, without luck:
--8<--
Warning: fopen(): open_basedir restriction in effect.
File(/tmp/foo.bar) is not within the allowed path(s):
(/home/sites/site81/:/tmp/:/usr/share/pear/) in
/home/sites/site81/web/fopen.php on line 3

Warning: fopen(/tmp/foo.bar): failed to open stream: Operation not
permitted in /home/sites/site81/web/fopen.php on line 3
--8<--

--8<--[ access.conf ]--8<--

php_admin_value open_basedir
/home/sites/site81/:/tmp/:/usr/share/pear/

--8<--



The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/34656

-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [Opn]: open_basedir restriction in effect although paths are set correctly

2005-11-30 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
 Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.1
 New Comment:

Do you need more information?


Previous Comments:


[2005-11-25 13:27:23] wolfram at schlich dot org

just tried http://snaps.php.net/php4-STABLE-200511251208.tar.gz with
open_basedir in php.ini -- no luck:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s): (/tmp/) in
/home/sites/site15/web/write_tmp.php on line 3



[2005-11-01 22:34:00] [EMAIL PROTECTED]

Does it work if you set the open_basedir in php.ini ?




[2005-11-01 15:01:35] wolfram at schlich dot org

Just tried with the freshly released 4.4.1, without luck:
--8<--
Warning: fopen(): open_basedir restriction in effect.
File(/tmp/foo.bar) is not within the allowed path(s):
(/home/sites/site81/:/tmp/:/usr/share/pear/) in
/home/sites/site81/web/fopen.php on line 3

Warning: fopen(/tmp/foo.bar): failed to open stream: Operation not
permitted in /home/sites/site81/web/fopen.php on line 3
--8<--

--8<--[ access.conf ]--8<--

php_admin_value open_basedir
/home/sites/site81/:/tmp/:/usr/share/pear/

--8<--



[2005-09-27 12:44:53] wolfram at schlich dot org

Description:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 3

Warning: fopen(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 4

Warning: fopen(/tmp/f5_test): failed to open stream: Operation not
permitted in /home/sites/site15/web/write_tmp.php on line 4

Warning: fwrite(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 5

Warning: fclose(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 6

Reproduce code:
---
--8<--[ write_tmp.php ]--8<--

--8<--[ httpd.conf ]--8<--

## doesn't work
php_admin_value open_basedir /home/sites/site15/:/tmp
## also doesn't work
# php_admin_value open_basedir /
## works, but is not what's desired
# php_admin_value open_basedir none

--8<--
Also tried to set open_basedir within the VirtualHost, didn'
t work either.

Expected result:

no errors

Actual result:
--
open_basedir errors





-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [NoF->Opn]: open_basedir restriction in effect although paths are set correctly

2005-11-25 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   No Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.1
 New Comment:

just tried http://snaps.php.net/php4-STABLE-200511251208.tar.gz with
open_basedir in php.ini -- no luck:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s): (/tmp/) in
/home/sites/site15/web/write_tmp.php on line 3


Previous Comments:


[2005-11-09 01:00:02] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".



[2005-11-01 22:34:00] [EMAIL PROTECTED]

Does it work if you set the open_basedir in php.ini ?




[2005-11-01 15:01:35] wolfram at schlich dot org

Just tried with the freshly released 4.4.1, without luck:
--8<--
Warning: fopen(): open_basedir restriction in effect.
File(/tmp/foo.bar) is not within the allowed path(s):
(/home/sites/site81/:/tmp/:/usr/share/pear/) in
/home/sites/site81/web/fopen.php on line 3

Warning: fopen(/tmp/foo.bar): failed to open stream: Operation not
permitted in /home/sites/site81/web/fopen.php on line 3
--8<--

--8<--[ access.conf ]--8<--

php_admin_value open_basedir
/home/sites/site81/:/tmp/:/usr/share/pear/

--8<--



[2005-09-27 19:27:01] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Something related to open_basedir and the paths was just fixed. Give it
an hour or two.


----

[2005-09-27 12:44:53] wolfram at schlich dot org

Description:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 3

Warning: fopen(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 4

Warning: fopen(/tmp/f5_test): failed to open stream: Operation not
permitted in /home/sites/site15/web/write_tmp.php on line 4

Warning: fwrite(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 5

Warning: fclose(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 6

Reproduce code:
---
--8<--[ write_tmp.php ]--8<--

--8<--[ httpd.conf ]--8<--

## doesn't work
php_admin_value open_basedir /home/sites/site15/:/tmp
## also doesn't work
# php_admin_value open_basedir /
## works, but is not what's desired
# php_admin_value open_basedir none

--8<--
Also tried to set open_basedir within the VirtualHost, didn'
t work either.

Expected result:

no errors

Actual result:
--
open_basedir errors





-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [NoF->Opn]: open_basedir restriction in effect although paths are set correctly

2005-11-01 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   No Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
-PHP Version:  4.4.0
+PHP Version:  4.4.1
 New Comment:

Just tried with the freshly released 4.4.1, without luck:
--8<--
Warning: fopen(): open_basedir restriction in effect.
File(/tmp/foo.bar) is not within the allowed path(s):
(/home/sites/site81/:/tmp/:/usr/share/pear/) in
/home/sites/site81/web/fopen.php on line 3

Warning: fopen(/tmp/foo.bar): failed to open stream: Operation not
permitted in /home/sites/site81/web/fopen.php on line 3
--8<--

--8<--[ access.conf ]--8<--

php_admin_value open_basedir
/home/sites/site81/:/tmp/:/usr/share/pear/

--8<--


Previous Comments:


[2005-10-05 01:00:09] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".



[2005-09-27 19:53:27] [EMAIL PROTECTED]

Give feedback when you have some..

----

[2005-09-27 19:47:49] wolfram at schlich dot org

thanks! will do.



[2005-09-27 19:27:01] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Something related to open_basedir and the paths was just fixed. Give it
an hour or two.


----

[2005-09-27 19:24:09] wolfram at schlich dot org

sorry, I cannot use anything other than php4 on that machines.
they are used for webhosting, the customers depend on php4.
thanks.



The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/34656

-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [Fbk->Opn]: open_basedir restriction in effect although paths are set correctly

2005-09-27 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.0
 New Comment:

thanks! will do.


Previous Comments:


[2005-09-27 19:27:01] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Something related to open_basedir and the paths was just fixed. Give it
an hour or two.




[2005-09-27 19:24:09] wolfram at schlich dot org

sorry, I cannot use anything other than php4 on that machines.
they are used for webhosting, the customers depend on php4.
thanks.



[2005-09-27 19:09:06] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5-win32-latest.zip





[2005-09-27 12:44:53] wolfram at schlich dot org

Description:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 3

Warning: fopen(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 4

Warning: fopen(/tmp/f5_test): failed to open stream: Operation not
permitted in /home/sites/site15/web/write_tmp.php on line 4

Warning: fwrite(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 5

Warning: fclose(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 6

Reproduce code:
---
--8<--[ write_tmp.php ]--8<--

--8<--[ httpd.conf ]--8<--

## doesn't work
php_admin_value open_basedir /home/sites/site15/:/tmp
## also doesn't work
# php_admin_value open_basedir /
## works, but is not what's desired
# php_admin_value open_basedir none

--8<--
Also tried to set open_basedir within the VirtualHost, didn'
t work either.

Expected result:

no errors

Actual result:
--
open_basedir errors





-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [Fbk->Opn]: open_basedir restriction in effect although paths are set correctly

2005-09-27 Thread wolfram at schlich dot org
 ID:   34656
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.2.16 i586
 PHP Version:  4.4.0
 New Comment:

sorry, I cannot use anything other than php4 on that machines.
they are used for webhosting, the customers depend on php4.
thanks.


Previous Comments:


[2005-09-27 19:09:06] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php5-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5-win32-latest.zip





[2005-09-27 12:44:53] wolfram at schlich dot org

Description:

Warning: touch(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 3

Warning: fopen(): open_basedir restriction in effect.
File(/tmp/f5_test) is not within the allowed path(s):
(/home/sites/site15/:/tmp) in /home/sites/site15/web/write_tmp.php on
line 4

Warning: fopen(/tmp/f5_test): failed to open stream: Operation not
permitted in /home/sites/site15/web/write_tmp.php on line 4

Warning: fwrite(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 5

Warning: fclose(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 6

Reproduce code:
---
--8<--[ write_tmp.php ]--8<--

--8<--[ httpd.conf ]--8<--

## doesn't work
php_admin_value open_basedir /home/sites/site15/:/tmp
## also doesn't work
# php_admin_value open_basedir /
## works, but is not what's desired
# php_admin_value open_basedir none

--8<--
Also tried to set open_basedir within the VirtualHost, didn'
t work either.

Expected result:

no errors

Actual result:
--
open_basedir errors





-- 
Edit this bug report at http://bugs.php.net/?id=34656&edit=1


#34656 [NEW]: open_basedir restriction in effect although paths are set correctly

2005-09-27 Thread wolfram at schlich dot org
From: wolfram at schlich dot org
Operating system: Linux 2.2.16 i586
PHP version:  4.4.0
PHP Bug Type: Safe Mode/open_basedir
Bug description:  open_basedir restriction in effect although paths are set 
correctly

Description:

Warning: touch(): open_basedir restriction in effect. File(/tmp/f5_test)
is not within the allowed path(s): (/home/sites/site15/:/tmp) in
/home/sites/site15/web/write_tmp.php on line 3

Warning: fopen(): open_basedir restriction in effect. File(/tmp/f5_test)
is not within the allowed path(s): (/home/sites/site15/:/tmp) in
/home/sites/site15/web/write_tmp.php on line 4

Warning: fopen(/tmp/f5_test): failed to open stream: Operation not
permitted in /home/sites/site15/web/write_tmp.php on line 4

Warning: fwrite(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 5

Warning: fclose(): supplied argument is not a valid stream resource in
/home/sites/site15/web/write_tmp.php on line 6

Reproduce code:
---
--8<--[ write_tmp.php ]--8<--

--8<--[ httpd.conf ]--8<--

## doesn't work
php_admin_value open_basedir /home/sites/site15/:/tmp
## also doesn't work
# php_admin_value open_basedir /
## works, but is not what's desired
# php_admin_value open_basedir none

--8<--
Also tried to set open_basedir within the VirtualHost, didn'
t work either.

Expected result:

no errors

Actual result:
--
open_basedir errors

-- 
Edit bug report at http://bugs.php.net/?id=34656&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=34656&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=34656&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=34656&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=34656&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=34656&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=34656&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=34656&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=34656&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34656&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=34656&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=34656&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=34656&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=34656&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=34656&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=34656&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=34656&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34656&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=34656&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=34656&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=34656&r=mysqlcfg


#34050 [Fbk->Opn]: safe_mode_include_dir isn't honored

2005-08-11 Thread wolfram at schlich dot org
 ID:   34050
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Feedback
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.6.12-gentoo-r4 x86_64
 PHP Version:  5CVS-2005-08-09 (dev)
 New Comment:

no symlink...


Previous Comments:


[2005-08-12 00:30:26] [EMAIL PROTECTED]

Can't reproduce.
Make sure that /usr/lib/php/Smarty (or any of it's parent dirs) is not
a symbolic link. 



[2005-08-09 18:16:23] wolfram at schlich dot org

then the comment above safe_mode_include_dir is silly:

; When safe_mode is on, UID/GID checks are bypassed when
; including files from this directory and its subdirectories.
; (directory must also be in include_path or full path must
; be used when including)

it says "UID/GID checks are bypassed", so why should I enable
safe_mod_gid then?

I even tried that, result:
--8<--
Warning: main() [function.main]: SAFE MODE Restriction in effect. The
script whose uid/gid is 667/888 is not allowed to access
/usr/lib/php/Smarty/Smarty.class.php owned by uid/gid 0/0 in
/home/wschlich/public_html/smartytest/class.MySmarty.inc.php on line
27
--8<--



[2005-08-09 18:09:19] [EMAIL PROTECTED]

; By default, Safe Mode does a UID compare check when
; opening files. If you want to relax this to a GID compare,
; then turn on safe_mode_gid.


----

[2005-08-09 16:56:52] wolfram at schlich dot org

Description:

when safe_mode is active, I want to be able to include files from
certain directories without checking for their UID/GID.

Reproduce code:
---
--8<--[ php.ini ]--8<--
safe_mode = On
safe_mode_gid = Off
safe_mode_include_dir = "/usr/share/php/:/usr/lib/php/"
safe_mode_allowed_env_vars = PHP_,LANG,LC_
--8<--[ apache vhost config ]--8<--
php_value include_path ".:/usr/share/php:/usr/lib/php"
--8<--[ sample php script ]--8<--
require_once('/usr/lib/php/Smarty/Smarty.class.php');
--8<--

Expected result:

included file, no error message.

Actual result:
--
Warning: main() [function.main]: SAFE MODE Restriction in effect. The
script whose uid is 667 is not allowed to access
/usr/lib/php/Smarty/Smarty.class.php owned by uid 0 in
/home/wschlich/public_html/smartytest/smartytest.php on line 19





-- 
Edit this bug report at http://bugs.php.net/?id=34050&edit=1


#34050 [Bgs->Opn]: safe_mode_include_dir isn't honored

2005-08-09 Thread wolfram at schlich dot org
 ID:   34050
 User updated by:  wolfram at schlich dot org
 Reported By:  wolfram at schlich dot org
-Status:   Bogus
+Status:   Open
 Bug Type: Safe Mode/open_basedir
 Operating System: Linux 2.6.12-gentoo-r4 x86_64
 PHP Version:  5CVS-2005-08-09 (dev)
 New Comment:

then the comment above safe_mode_include_dir is silly:

; When safe_mode is on, UID/GID checks are bypassed when
; including files from this directory and its subdirectories.
; (directory must also be in include_path or full path must
; be used when including)

it says "UID/GID checks are bypassed", so why should I enable
safe_mod_gid then?

I even tried that, result:
--8<--
Warning: main() [function.main]: SAFE MODE Restriction in effect. The
script whose uid/gid is 667/888 is not allowed to access
/usr/lib/php/Smarty/Smarty.class.php owned by uid/gid 0/0 in
/home/wschlich/public_html/smartytest/class.MySmarty.inc.php on line
27
--8<--


Previous Comments:


[2005-08-09 18:09:19] [EMAIL PROTECTED]

; By default, Safe Mode does a UID compare check when
; opening files. If you want to relax this to a GID compare,
; then turn on safe_mode_gid.




[2005-08-09 16:56:52] wolfram at schlich dot org

Description:

when safe_mode is active, I want to be able to include files from
certain directories without checking for their UID/GID.

Reproduce code:
---
--8<--[ php.ini ]--8<--
safe_mode = On
safe_mode_gid = Off
safe_mode_include_dir = "/usr/share/php/:/usr/lib/php/"
safe_mode_allowed_env_vars = PHP_,LANG,LC_
--8<--[ apache vhost config ]--8<--
php_value include_path ".:/usr/share/php:/usr/lib/php"
--8<--[ sample php script ]--8<--
require_once('/usr/lib/php/Smarty/Smarty.class.php');
--8<--

Expected result:

included file, no error message.

Actual result:
--
Warning: main() [function.main]: SAFE MODE Restriction in effect. The
script whose uid is 667 is not allowed to access
/usr/lib/php/Smarty/Smarty.class.php owned by uid 0 in
/home/wschlich/public_html/smartytest/smartytest.php on line 19





-- 
Edit this bug report at http://bugs.php.net/?id=34050&edit=1


#34050 [NEW]: safe_mode_include_dir isn't honored

2005-08-09 Thread wolfram at schlich dot org
From: wolfram at schlich dot org
Operating system: Linux 2.6.12-gentoo-r4 x86_64
PHP version:  5CVS-2005-08-09 (dev)
PHP Bug Type: Safe Mode/open_basedir
Bug description:  safe_mode_include_dir isn't honored

Description:

when safe_mode is active, I want to be able to include files from certain
directories without checking for their UID/GID.

Reproduce code:
---
--8<--[ php.ini ]--8<--
safe_mode = On
safe_mode_gid = Off
safe_mode_include_dir = "/usr/share/php/:/usr/lib/php/"
safe_mode_allowed_env_vars = PHP_,LANG,LC_
--8<--[ apache vhost config ]--8<--
php_value include_path ".:/usr/share/php:/usr/lib/php"
--8<--[ sample php script ]--8<--
require_once('/usr/lib/php/Smarty/Smarty.class.php');
--8<--

Expected result:

included file, no error message.

Actual result:
--
Warning: main() [function.main]: SAFE MODE Restriction in effect. The
script whose uid is 667 is not allowed to access
/usr/lib/php/Smarty/Smarty.class.php owned by uid 0 in
/home/wschlich/public_html/smartytest/smartytest.php on line 19

-- 
Edit bug report at http://bugs.php.net/?id=34050&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=34050&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=34050&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=34050&r=trysnapshot51
Fixed in CVS:http://bugs.php.net/fix.php?id=34050&r=fixedcvs
Fixed in release:http://bugs.php.net/fix.php?id=34050&r=alreadyfixed
Need backtrace:  http://bugs.php.net/fix.php?id=34050&r=needtrace
Need Reproduce Script:   http://bugs.php.net/fix.php?id=34050&r=needscript
Try newer version:   http://bugs.php.net/fix.php?id=34050&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=34050&r=support
Expected behavior:   http://bugs.php.net/fix.php?id=34050&r=notwrong
Not enough info: 
http://bugs.php.net/fix.php?id=34050&r=notenoughinfo
Submitted twice: 
http://bugs.php.net/fix.php?id=34050&r=submittedtwice
register_globals:http://bugs.php.net/fix.php?id=34050&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=34050&r=php3
Daylight Savings:http://bugs.php.net/fix.php?id=34050&r=dst
IIS Stability:   http://bugs.php.net/fix.php?id=34050&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=34050&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=34050&r=float
No Zend Extensions:  http://bugs.php.net/fix.php?id=34050&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=34050&r=mysqlcfg