#38963 [Opn->Fbk]: tempnam bypasses open_basedir

2006-09-26 Thread tony2001
 ID:   38963
 Updated by:   [EMAIL PROTECTED]
 Reported By:  manuel at mausz dot at
-Status:   Open
+Status:   Feedback
 Bug Type: Filesystem function related
 Operating System: Linux/Gentoo
 PHP Version:  4.4.4
 New Comment:

Make sure your phpinfo() display the expected value of open_basedir.
Turn on display_errors etc.
It doesn't depend on the server API in any way.


Previous Comments:


[2006-09-26 15:58:57] manuel at mausz dot at

Please try using mod_php. Using the client also don't work for me.

Oh and just to be sure:
- tried with safe_mode on + off
- open_basedir does _not_ include /tmp ;)



[2006-09-26 15:30:39] [EMAIL PROTECTED]

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Cannot reproduce:

# ./sapi/cli/php -r 'var_dump(tempnam(false, "temp"));'

Warning: tempnam(): open_basedir restriction in effect. File() is not
within the allowed path(s): (/www) in Command line code on line 1
bool(false)




[2006-09-26 15:19:47] manuel at mausz dot at

Description:

tempnam bypasses open_basedir if dir = false

Reproduce code:
---


Expected result:

Warning: tempnam() [function.tempnam]: open_basedir restriction in
effect. File(/tmp) is not within the allowed path(s): (...) in

Actual result:
--
# ls /tmp/phptest*
/tmp/phptestt4mIOa





-- 
Edit this bug report at http://bugs.php.net/?id=38963&edit=1


#38963 [Opn->Fbk]: tempnam bypasses open_basedir

2006-09-26 Thread tony2001
 ID:   38963
 Updated by:   [EMAIL PROTECTED]
 Reported By:  manuel at mausz dot at
-Status:   Open
+Status:   Feedback
 Bug Type: Filesystem function related
 Operating System: Linux/Gentoo
 PHP Version:  4.4.4
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip

Cannot reproduce:

# ./sapi/cli/php -r 'var_dump(tempnam(false, "temp"));'

Warning: tempnam(): open_basedir restriction in effect. File() is not
within the allowed path(s): (/www) in Command line code on line 1
bool(false)



Previous Comments:


[2006-09-26 15:19:47] manuel at mausz dot at

Description:

tempnam bypasses open_basedir if dir = false

Reproduce code:
---


Expected result:

Warning: tempnam() [function.tempnam]: open_basedir restriction in
effect. File(/tmp) is not within the allowed path(s): (...) in

Actual result:
--
# ls /tmp/phptest*
/tmp/phptestt4mIOa





-- 
Edit this bug report at http://bugs.php.net/?id=38963&edit=1