From: dkh-php at nighttide dot net Operating system: FreeBSD 4.8-STABLE PHP version: 4.3.2 PHP Bug Type: *Web Server problem Bug description: .htaccess php var overides not being cleared between page requests
Description: ------------ FreeBSD 4.8-STABLE Apache 2.0.46 PHP 4.3.2 PHP being used as module. User 1 creates an .htaccess file in their dir at /home/user1/WWW/sub/.htaccess. This file contains php var overides for auto_prepend_file, auto_append_file, include_path etc. User 2 has a simple index.php file - html tag, body tag, single text line followed by a php invocation of phpinfo (happens with other pages as well) then closing tags. No .htaccess file here. User 1 stuff in /home/user1/WWW/sub/index.php works as expected User 2 stuff in /home/user2/WWW/index.php, if loaded immediately after /home/user1/WWW/sub/index.php will see User 1's auto_prepend_file and auto_append_file. The local values from the phpinfo invocation shows User 2's overrides. Appears as if the apache session (or thread?) that serviced the first request, doesn't clear out the local overrides before handling a new request. Potentially dangerous. -- Edit bug report at http://bugs.php.net/?id=24248&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=24248&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=24248&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=24248&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=24248&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=24248&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=24248&r=support Expected behavior: http://bugs.php.net/fix.php?id=24248&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=24248&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=24248&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=24248&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=24248&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=24248&r=dst IIS Stability: http://bugs.php.net/fix.php?id=24248&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=24248&r=gnused