[PHP-DEV] PHP 4.0 Bug #8949: imap_8bit() does not encode leading dots correctly

[chris . php]

From: [EMAIL PROTECTED]
Operating system: Windows 2000
PHP version:  4.0.4pl1
PHP Bug Type: IMAP related
Bug description:  imap_8bit() does not encode leading dots correctly

The imap_8bit() function does not duplicate leading dots, which may cause a message to 
be cut off if it has a single dot on a line. Also, mail clients such as Outlook 2000 
will strip these leading dots, which can cause an URL to be mangled if it is split 
along a dot (this is how I discovered the bug). To fix, replace any dots at the very 
start of a quoted-printable encoded line with 2 dots. (.hello becomes ..hello, etc)


-- 
Edit Bug report at: http://bugs.php.net/?id=8949&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8828 Updated: mktime using mday<=0

[dieter]

ID: 8828
User Update by: [EMAIL PROTECTED]
Old-Status: Closed
Status: Open
Bug Type: Date/time related
Description: mktime using mday<=0

I have send a bug report to darwin-developers and 
apple, too, but

i have check some UNIX-systems and i haven't found 
any man-page, where is describe what should be 
happend on "tm_mday" <= 0.
IMHO this is a undocumented feature, which is used by 
PHP.

man mktime (Linux 2.2.13)

   tm_mday
  The day of the month, in the range 1 to 31.

Sun Release 4.1
--
   int tm_mday; /* day of month (1 - 31) */


SunOS 5.5
---
   int  tm_mday;   /* day of the month - [1, 31] */

HP-UX Release 10.20
--
   int tm_mday; /* day of month - [1,31] */


HP-UX Release 11.00
---
   int tm_mday; /* day of month - [1,31] */

AIX 4.3.2


   int tm_mday;/* Day of month (1 - 31) */


Darwin 1.0.2
-
   int tm_mday; /* day of month (1 - 31) */

I think i should by much better to check mktime() on 
configure and set a #define for compilation. Only on 
"datetime.c" must be made a patch to support MacOS 
X's / Darwin's mktime()-systemcall, i think!


Previous Comments:
---

[2001-01-22 22:32:57] [EMAIL PROTECTED]
macos x is behaving in a non-standard way. we just use the underlying mktime() 
function.

you might try reporting it to the darwin developers.

http://www.opensource.apple.com/projects/bugs.html

---

[2001-01-21 08:06:36] [EMAIL PROTECTED]
On PHP documantation:
mktime(hour,min,sec, year,0,mon) refers the last day of 
month 'mon-1'. On MacOS X this failed, there it refers 
the first day of month 'mon' and mktime(hour,min,sec, 
year,-1,mon) refers the last day of month 'mon-1'.

See the test:

[aragorn:~/Downloads] dieter% cat A.c
#include 
#include 

main()
{
struct tm mytm;
int i;

mytm.tm_sec = 0; mytm.tm_min = 0;
mytm.tm_hour = 0; mytm.tm_year = 101;
mytm.tm_wday = 0; mytm.tm_yday = 0;
mytm.tm_isdst = 0; mytm.tm_gmtoff = 0;
mytm.tm_zone = 0;

for (i = 2; i >= -2; i--)
{
mytm.tm_mday = i;
mytm.tm_mon = 2;
printf ("%02d.%02d ",
   mytm.tm_mday, mytm.tm_mon+1);
printf (" --> %ld", mktime(&mytm));
printf (" --> %02d.%02dn",
   mytm.tm_mday, mytm.tm_mon+1);
}
}
[aragorn:~/Downloads] dieter% cc -o A A.c
[aragorn:~/Downloads] dieter% ./A
02.03  --> 983487600 --> 02.03
01.03  --> 983401200 --> 01.03
00.03  --> 983401200 --> 01.03
-1.03  --> 983314800 --> 28.02
-2.03  --> 983228400 --> 27.02
[aragorn:~/Downloads] dieter% 


---


Full Bug description available at: http://bugs.php.net/?id=8828


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Caching Webhosts and IP's

[Graeme Canivet]

Hi everyone. This is my first time posting to this 
list, hopefully I can get some questions answered
as they arise, much like this one: 
 
 
It's probably not to difficult to get around, and I 
think I know how, but just wondering if someone else has had a similar problem. 
 
When I run phpinfo(); the variable 
HTTP_SERVER_VARS["REMOTE_ADDR"] appears as my actual
ip.   But, I'm running a seperate file, 
that calls the same variable and the IP is slightly different. 
At first, I wasn't sure why? but, then I did a 
lookup.  It seems to be the IP of my ISP's caching system. Is there a way 
around this. It appears that it's doing all the get's, or 
something
 
Thankyou, 
Graeme. 

[PHP-DEV] --enable-tiny

[Andi Gutmans]

Hi,

I often want to test things in PHP which don't require the default 
extensions to be compiled in.
It would be nice if we had something like --enable-tiny which would 
automatically turn off all of the default extensions (besides standard) 
which are pcre, mysql, xml and session.
Right now ./configure supports turning off pcre, xml and session so only 
mysql is missing. I guess we could either add a --disable-mysql and I could 
make myself a tiny.sh script which automatically configures PHP without 
these modules or it could be nice to have a --enable-tiny flag (but not 
necessary).


I don't know this autoconf stuff well. I guess a good start would be to 
allow for a --disable-mysql.
Does anyone here have the strength to do do it?

Thanks,

Andi


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] Caching Webhosts and IP's

[Graeme Canivet]

False alarm. It's all good. 
Some variable called HTTP_X_FORWARDED_FOR solved it. 
that was from the php.net quick ref manual 
errata, I think! 
Thanks

  - Original Message - 
  From: 
  Graeme 
  Canivet 
  To: [EMAIL PROTECTED] 
  Sent: Saturday, January 27, 2001 8:04 
  AM
  Subject: [PHP-DEV] Caching Webhosts and 
  IP's
  
  Hi everyone. This is my first time posting to 
  this list, hopefully I can get some questions answered
  as they arise, much like this one: 
   
   
  It's probably not to difficult to get around, and 
  I think I know how, but just wondering if someone else has had a similar problem. 
   
  When I run phpinfo(); the variable 
  HTTP_SERVER_VARS["REMOTE_ADDR"] appears as my actual
  ip.   But, I'm running a seperate file, 
  that calls the same variable and the IP is slightly different. 
  At first, I wasn't sure why? but, then I did a 
  lookup.  It seems to be the IP of my ISP's caching system. Is there a way 
  around this. It appears that it's doing all the get's, or 
  something
   
  Thankyou, 
  Graeme. 

Re: [PHP-DEV] --enable-tiny

[jeremy brand]

Am I missing something?  Can't you just do --without-mysql?

In general, if the option is --with-???, use --without-??? to exclude
it.  If the options is --enable-???, then use --disable-??? to disable
it.

Jeremy

Jeremy Brand :: Sr. Software Engineer :: 408-245-9058 :: [EMAIL PROTECTED]
http://www.JeremyBrand.com/Jeremy/Brand/Jeremy_Brand.html for more 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
"LINUX is obsolete"  -- Andy Tanenbaum, January 29th, 1992
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   http://www.JEEP-FOR-SALE.com/ -- I need a buyer
  Get your own Free, Private email at http://www.smackdown.com/

On Sat, 27 Jan 2001, Andi Gutmans wrote:

> Date: Sat, 27 Jan 2001 15:08:06 +0200
> From: Andi Gutmans <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: [PHP-DEV] --enable-tiny
> 
> Hi,
> 
> I often want to test things in PHP which don't require the default 
> extensions to be compiled in.
> It would be nice if we had something like --enable-tiny which would 
> automatically turn off all of the default extensions (besides standard) 
> which are pcre, mysql, xml and session.
> Right now ./configure supports turning off pcre, xml and session so only 
> mysql is missing. I guess we could either add a --disable-mysql and I could 
> make myself a tiny.sh script which automatically configures PHP without 
> these modules or it could be nice to have a --enable-tiny flag (but not 
> necessary).
> 
> 
> I don't know this autoconf stuff well. I guess a good start would be to 
> allow for a --disable-mysql.
> Does anyone here have the strength to do do it?
> 
> Thanks,
> 
> Andi
> 
> 
> -- 
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
> 
> 


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] --enable-tiny

[Andi Gutmans]

I think you're right :)

Andi

At 05:19 AM 1/27/2001 -0800, jeremy brand wrote:
>Am I missing something?  Can't you just do --without-mysql?
>
>In general, if the option is --with-???, use --without-??? to exclude
>it.  If the options is --enable-???, then use --disable-??? to disable
>it.
>
>Jeremy
>
>Jeremy Brand :: Sr. Software Engineer :: 408-245-9058 :: [EMAIL PROTECTED]
>http://www.JeremyBrand.com/Jeremy/Brand/Jeremy_Brand.html for more
>- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> "LINUX is obsolete"  -- Andy Tanenbaum, January 29th, 1992
>- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>http://www.JEEP-FOR-SALE.com/ -- I need a buyer
>   Get your own Free, Private email at http://www.smackdown.com/
>
>On Sat, 27 Jan 2001, Andi Gutmans wrote:
>
> > Date: Sat, 27 Jan 2001 15:08:06 +0200
> > From: Andi Gutmans <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: [PHP-DEV] --enable-tiny
> >
> > Hi,
> >
> > I often want to test things in PHP which don't require the default
> > extensions to be compiled in.
> > It would be nice if we had something like --enable-tiny which would
> > automatically turn off all of the default extensions (besides standard)
> > which are pcre, mysql, xml and session.
> > Right now ./configure supports turning off pcre, xml and session so only
> > mysql is missing. I guess we could either add a --disable-mysql and I 
> could
> > make myself a tiny.sh script which automatically configures PHP without
> > these modules or it could be nice to have a --enable-tiny flag (but not
> > necessary).
> >
> >
> > I don't know this autoconf stuff well. I guess a good start would be to
> > allow for a --disable-mysql.
> > Does anyone here have the strength to do do it?
> >
> > Thanks,
> >
> > Andi
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
> >


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] AGAIN: Caching Webhosts and IP's

[Graeme Canivet]

Sorry.. wow, that'd didn't work either.. 

So, anyone else have a suggestion.
 
It appears th\at these variables are not set on my 
server? is
that a setting that they should change? 
or?

  - Original Message - 
  From: 
  Graeme 
  Canivet 
  To: [EMAIL PROTECTED] 
  Sent: Saturday, January 27, 2001 8:22 
  AM
  Subject: Re: [PHP-DEV] Caching Webhosts 
  and IP's
  
  False alarm. It's all good. 
  Some variable called HTTP_X_FORWARDED_FOR solved it. 
  that was from the php.net quick ref 
  manual errata, I think! 
  Thanks
  
- Original Message - 
From: 
Graeme 
Canivet 
To: [EMAIL PROTECTED] 
Sent: Saturday, January 27, 2001 8:04 
AM
Subject: [PHP-DEV] Caching Webhosts and 
IP's

Hi everyone. This is my first time posting to 
this list, hopefully I can get some questions answered
as they arise, much like this one: 

 
 
It's probably not to difficult to get around, 
and I think I know how, but just wondering if someone else has 
had a similar problem. 
 
When I run phpinfo(); the variable 
HTTP_SERVER_VARS["REMOTE_ADDR"] appears as my actual
ip.   But, I'm running a seperate 
file, that calls the same variable and the IP is slightly different. 

At first, I wasn't sure why? but, then I did a 
lookup.  It seems to be the IP of my ISP's caching system. Is there a 
way around this. It appears that it's doing all the get's, or 
something
 
Thankyou, 
Graeme. 

[PHP-DEV] PHP 4.0 Bug #8944 Updated: php.exe crashes for no apparent reason...

[leo]

ID: 8944
User Update by: [EMAIL PROTECTED]
Status: Open
Bug Type: Reproduceable crash
Description: php.exe crashes for no apparent reason...

heh, seems like there was a syntax error in that code of mine, namely a ')' too much 
in the end of line 5 :)

i realised that when i messed around and changed the include() to include_once() in 
the calling file (after noticing that the if-statement was the stuff that made it all 
happen). after that, i got an errormessage instead of a crash.

so, summary:

* if i have the errorous ')' at the end of line 5, and an include( 'file_with_code' ) 
in the file that includes the file with this code in, php.exe crashes.

* if i remove the ')', it all works just fine, duh..

* if i change the include() to an include_once(), php gives me an errormessage instead 
of crashing, as it should.

* php doesnt behave as expected under some circumstances, as described above.

there.

Previous Comments:
---

[2001-01-26 18:38:32] [EMAIL PROTECTED]
--the following was suppoed to be mailed but.. :)--

Hi!

I want to report a crash in php.exe that I experienced just now. I'm sending this 
notification right away, without first trying to find the cause of it in the crappy 
code i have here, since I believe that even if the code is errorous, PHP should'nt 
crash. The system is NT Workstation 4.0, sp5, Apache 1.3.14 and PHP 4.0.3pl1.

The following code resides in a .php file that is include()´d in the file that is 
called through the browser:



The crashing started right after adding this code and reloading the file that includes 
the .php-file it resides in. I got an 500 ISE message in the browser. The function 
trim_array() is never called, the crash occours anyway.

The Apache errorlog says the following:

[Fri Jan 26 23:42:36 2001] [error] [client 192.168.0.222] Premature end of script 
headers: c:/program/php/php.exe

Maybe that'll help, I dunno..

I'll send along a shot of the msgbox I got, and the PHP and Apache conffiles, and a 
screenshot of VC++ 6.0´s debugger "in action" ;) --i wanted to but i kinda cant here 
with this online bug reporting system. mail me if you want the files...--

oh and, i cant make a gdb backtrace on this platform, can i ..?

 // Yours Faithfully, Leo

/ Leo R. Lundgren
/ +46 70 26 75 619
/ [EMAIL PROTECTED]

---START COPY OF php.ini---

[PHP]

;;;
; About this file ;
;;;
; This file controls many aspects of PHP's behavior.  In order for PHP to
; read it, it must be named 'php.ini'.  PHP looks for it in the current
; working directory, in the path designated by the environment variable
; PHPRC, and in the path that was defined in compile time (in that order).
; Under Windows, the compile-time path is the Windows directory.  The
; path in which the php.ini file is looked for can be overriden using
; the -c argument in command line mode.
;
; The syntax of the file is extremely simple.  Whitespace and Lines
; beginning with a semicolon are silently ignored (as you probably guessed).
; Section headers (e.g. [Foo]) are also silently ignored, even though
; they might mean something in the future.
;
; Directives are specified using the following syntax:
; directive = value
; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
;
; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
; (e.g. E_ALL & ~E_NOTICE), or a quoted string ("foo").
;
; Expressions in the INI file are limited to bitwise operators and parentheses:
; | bitwise OR
; & bitwise AND
; ~ bitwise NOT
; ! boolean NOT
;
; Boolean flags can be turned on using the values 1, On, True or Yes.
; They can be turned off using the values 0, Off, False or No.
;
; An empty string can be denoted by simply not writing anything after the equal
; sign, or by using the None keyword:
;
;   foo =   ; sets foo to an empty string
;   foo = none  ; sets foo to an empty string
;   foo = "none"; sets foo to the string 'none'
;
; If you use constants in your value, and these constants belong to a dynamically
; loaded extension (either a PHP extension or a Zend extension), you may only
; use these constants *after* the line that loads the extension.
;
; All the values in the php.ini-dist file correspond to the builtin
; defaults (that is, if no php.ini is used, or if you delete these lines,
; the builtin defaults will be identical).



; Language Options ;


engine  =   On  ; Enable the PHP scripting language engine 
under Apache
short_open_tag  =  

RE: [PHP-DEV] --enable-tiny

[Mike Robinson]

Andi Gutmans wrote:
> 
> I think you're right :)
> 
> Andi
> 
> At 05:19 AM 1/27/2001 -0800, jeremy brand wrote:
> >Am I missing something?  Can't you just do --without-mysql?
> >
> >In general, if the option is --with-???, use --without-??? to exclude
> >it.  If the options is --enable-???, then use --disable-??? to disable
> >it.
> >
> >Jeremy

How about --enable-kitchen-sink (or some other name) which builds
everything it can find, and --enable-tiny-cgi and --enable-tiny-dso,
which builds stripped out php without having to specify anything.

Regards
Mike Robinson


--
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] ob_gzhandler memory leak + readfile not working

[Ivan Petrovic]

Problems with php4.04pl1

Adding this line to php.ini is not enough:

output_handler = ob_gzhandler ;

I had to add:

header("Content-Encoding: gzip");

to PHP files. Then it worked. It is really nice feature and it speeds things
up. But the problem is, as some of you already reported, there is huge
memory leak. I hope it will be fixed soon.

Another thing:

When using gzipped output, it is impossible to use readfile(). Maybe this
function is not using cached output at all?


Regards
Ivan





-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] exec not returning status of the executed command

[Ivan Petrovic]

Bug in php4.04pl1

return_var in exec() always returns -1

It was working just fine in php4.01






-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] php eating carriage returns?

[Zeev Suraski]

Yeah, it's the intended behavior - there was a discussion about it a few 
years ago...

Zeev

At 17:16 26/1/2001, Monte Ohrt wrote:
>example:
>
>
>This is a test
>
>
>
>
>
>done.
>
>
>
>When I run this from the command line (4.0.5dev) I get the following
>output:
>
>
>
>This is a test
>
>testing1testing2testing3
>done.
>
>
>
>Why are there not carriage returns between the print statements? Is this
>an intended behavior?
>
>Monte
>
>--
>PHP Development Mailing List 
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>To contact the list administrators, e-mail: [EMAIL PROTECTED]

--
Zeev Suraski <[EMAIL PROTECTED]>
CTO &  co-founder, Zend Technologies Ltd. http://www.zend.com/


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] --enable-tiny

[Derick Rethans]

On Sat, 27 Jan 2001, Andi Gutmans wrote:

> I think you're right :)
>
> Andi

I think you need either more coffee, or more sleep =)

Derick Rethans

-
  PHP: Scripting the Web - www.php.net - [EMAIL PROTECTED]
-
JDI Media Solutions - www.jdimedia.nl - [EMAIL PROTECTED]
 H.v. Tussenbroekstraat 1 - 6952 BL Dieren - The Netherlands
-


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Proper IP

[Graeme Canivet]

Okay, an update to my caching proxy server 
problem:
 
It seems that I get the proper true ip, when using 
https://, 
and the caching servers ip when I use http:// 

 
Still, does anyone have any info on this 
problem?

[PHP-DEV] how to catch '=' operations on objects

[Harald Radi]

hi,

i've written an extension and want the following:



$var = new myObject();

$echo $var->elem;   // the php_myObject_property_handler() is 
called and i
can return the value

$echo $var  // php prints out 'Object' , but i whish to 
serialize my
object and deliver a string
_


is this possible or do i always have to call something like echo
$var->serialize(); ?

harald.

resistance is futile - nme.at


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 3.0 Bug Summary Report

[php-dev]

 PHP 3.0 Bug Database summary - http://bugs.php.net

 Num Status Summary (681 total including feature requests)
===[*General Issues]==
4180 Open   is_link returns false when target doesnt exist (should return true)
8083 Open   3.0.17 causes segm. faults with --enable-versioning
===[*Install and Config]==
7386 Feedback   referenced symbol not found when starting Apache
===[Compile Failure]==
1145 Open   Ypu cannot compile with --with-ldap using the Solaris7 bundled 
ldap-libs/header
1298 Open   need to use -taso with Netscape LDAP libs
1461 Open   won't compile with Stronghold 2.2 or 2.3
1933 Open   Unable to compile PHP3 with Oracle8 support
1997 Open   Compilation Problems
2225 Open   Compile error in ldap.c
2282 Open   Compile failure with Stronghold 2.4.1
2490 Open   Perl regular expression functions not available in windows binary
2585 Open   Error linking Oracle 7.3.2 libraries on SCO OpenServer 5.0.4
2629 Feedback   ldap.c fails to compile with PHP3.0.12 and PHP4b2
2658 Open   error while compiling PHP as apache module
2729 Open   Fatal error: Unable to open ???  in - on line 0
2751 Open   Storage size of "buf isn't known
2771 Open   bison.exe and the -S option not supported
2823 Open   undefined symbol: SQLParamData
2824 Open   Inconsistent parameter list declaration for...
2903 Open   fails to compile ifx.ec, report a syntax-error
2941 Suspended  compile fails with imap and sybase-ct (other function than reported 
before)
3033 Open   Fatal compile error on functions/ldap.c
3140 Feedback   Compile-Problems with snmp and pdflib
3185 Open   Undefined symbol
3217 Open   ld error when compiling as Apache DSO and --with-mysql
3218 Open   Can't compile php_ftp.dll
3426 Open   make with iodbc failed and I've found the problem
3501 Open   Compiling errors with Oracle-Funktions
3528 Open   Can't compile php 3.0.14 with Oracle support
3611 Open   switch() limitation and gcc invoked instead of cc
3677 Open   files not found
3717 Feedback   multiple definition of  gdImageColorResolve
3766 Open   configure doesn't allow for the Oracle N32 client SDK to be used
3776 Open   functions/db.c:107: parse error before '*'
4028 Open   wrong directories included for oracle 8.1.6
4217 Open   IBM DB2 will not compile.
4233 Open   The Interbase module won't compile.
4266 Open   Undeclared variables in function/imap.c starting ar line 435
4392 Open   Compile failure with GD 1.7, possibly others
4412 Open   xml failure
4417 Open   Informix specific parse error in functions/ifx.ec
4544 Open   Incompatiblility with latest (3.0) version of PDFlib
4899 Open   PHP Core Dumps With Apache 1.3.12
7734 Open   missing php3_ifx.h
===[Compile Warning]==
1638 Open   SPARCworks cc warnings (cosmetic)
2935 Open   adition bug id:2900
3151 Open   php.exe compile warnings because of arpa/inet.h
6602 Open   Failure to warn of duplicate class methods
6942 Open   php sockets unusable with irix-OS
6947 Open   all compiler warnings
===[dBase related]
3091 Open   dbase_replace_record miscounts number of fields
3429 Open   Warning: Unable to open database...
3447 Open   error on dbase_open function, it isn't open on write only or 
read-write mode.
3777 Open   Dbase_create fails to recognize array of arrays
3824 Open   dbase file cannot open by foxpro2
4802 Open   php.exe crashes while trying to execute the get_record function
===[DBM/DBA related]==
2890 Open   DBM extension on win32 does not valid database identifier error
3371 Open   dbmfetch reurns an empty string
3423 Open   dbmopen() not thread-safe
3809 Open   DBM extension for Win32 PHP3 is malfunctioning and/or has a flaw
3862 Open   dbmReplace & dbmDelete return inverse value
6720 Open   persistent "Warning: driver initialization failed" on db_open db2 2.7.7
===[Documentation problem]
2464 Open   install-windows95-nt.html does not agree with inf file
3257 Open   missing file
3279 Open   Reboot
3674 Open   Backreferences need 2 backslashes to work in preg_* functions
4399 Open   With no php3.ini, magic_quotes_gpc is 'Off'.  With one, it's default 
is 'On'.
===[Dynamic loading related]==
1188 Open   Configuration not work
1586 Open   In the compiled Win32 package, the php3_ldap doesn't load.
1993 Open   Startup failure of liphp3.so
2027 Open   Can't dynamicly load any extension dll file
2250 Open   n

[PHP-DEV] PHP 4.0 Bug Summary Report

[php-dev]

 PHP 4.0 Bug Database summary - http://bugs.php.net

 Num Status Summary (1084 total including feature requests)
===[*Configuration Issues]
7666 Feedback   PHP4 doesn't read php.ini with NT4/IIS
7695 Feedback   Error while accessing php script
7774 Open   PHP_AUTH_USER and PHP_AUTH_PW are set when using external 
authentication.
8066 Feedback   php.ini file not accessible via symbolic link
8238 Feedback   crypt() fails
8295 Open   absolute path in extension= directive in php.ini not recognized
8316 Feedback   cannot set short_open_tags to off
8670 Open   Incorect interpretation session.gc_maxlifetime parameter
8762 Open   No warning when entered nonexistent dll.
8815 Open   allow_fopen_url = On & include("URL") don't work
8848 Open   "open_basedir = /dir/incl" validates "/dir/include" and so on
===[*Database Functions]==
8706 Open   Database handle corruption?
===[*Directory/Filesystem functions]
8564 Open   fread generating false errors
8580 Feedback   Fileupload and Database mysql access
8698 Open   freediskspace returns zero when used on a windows 2000 'spanned' 
dynamic drive.
===[*Function Specific]===
6652 Feedback   include() require() add trailing CRLF
6708 Duplicate  Treatment of ' in htmlspecialchars() function
6839 Analyzed   get metatags
7220 Open   Error Report on Function Arguments
8202 Open   exec("java -cp classpath classname inputArgument"); has no effect
8270 Feedback   problem when including phpinfo() command with session
8297 Feedback   see test program below
8489 Feedback   Function empty() does not work
8563 Open   hebrevc() problems...
8857 Open   microtime() doesn't work after setlocale(LC_NUMERIC,"pl")
8869 Open   phpinfo() returns incorrect Configuration File Path
===[*General Issues]==
3076 Analyzed   system and popen are ok in safe_mode, not backquotes
4761 Assigned   exec, system all give an error on a fork...
6303 Duplicate  make install said libphp4.sl is not a DSO
6338 Feedback   script engine
6426 Duplicate  system() or exec(): unable to fork
6435 Duplicate  can't close session(by session_destroy()) - it write warning
6445 Feedback   problem with opendir
6499 Analyzed   $upload_type[] has wrong size with empty multiple-file uploads
6520 Duplicate  session_destroy() does not work
6542 Duplicate  exec() and system() cannot fork
6617 Open   JVM starts only on 3 requests per httpd
6624 Open   error_log() in registered shutdown function
6644 Duplicate  Test
6685 Analyzed   %20 mis-converted in GET mechanism
6875 Duplicate  upload_tmp_dir in php.ini doesn't work in safe_mode
6982 Open   disable_functions option don't works in Apache config
7134 Duplicate  misbehavior of print and sprintf AGAIN
7136 Duplicate  The binary version of php4.0.2 doesn't support the bindtextdomain 
function.
7243 Duplicate  upload_tmp_dir does not work in safe_mode
7444 Duplicate  General reference problems
7455 Duplicate  Problems with $this in constructor
7525 Duplicate  exec() does not work
7626 Feedback   session saving and loading seem to use different locales
7685 Open   File Upload Fails with Headers in Unexpected Order
7865 Duplicate  exec command
8446 Open   PHP/apache process is in infinite loop or appears to suck CPU
8618 Open   httpd process hangs
8671 Open   Random "Warning: Failed opening..."
===[*Install and Config]==
6614 Duplicate  configure does not recognize sys/socket.h
7280 Open   global iniline not supported in SGI Compiler
7318 Feedback   libgen.so problems
7382 Feedback   Install error on Configuring libtool
7731 Open   compilation with deprecated abi (no -n32)
7933 Open   install sets dangerous user.group's
7959 Open   ld: 0711-317 ERROR: Undefined symbol: .alloca
8158 Feedback   unable to find math.h when doing a make
8327 Feedback   Son of Defect 4155: X-Powered-By and Content-Type bogus headers 
resurfacing
8375 Feedback   Undefined Reference
8485 Feedback   while loading libphp4.so -> undefined symbol: 
SSL_CTX_set_tmp_rsa_callback
8551 Feedback   mssql70.dll problem
8651 Open   Linking with bundled Solaris libldap not supported
8837 Feedback   Compilation gives error after successfull configure with gw, t1
8840 Feedback   configure php w/FdfTk.hith --with-fdftk option
8843 Bogus  aclocal: configure.in: 54: macro `AM_INIT_AUTOMAKE' not found in 
library
8862 Suspended  libtool does not code runpath into libphp4.so
8905 Open   libcore 4 library not found
8918 Open   Fails when linking
8946 Open   configure could not find libxml library
===[*Mail Related]
8360 Feedback   Malloc Error
8734 Open

Re: [PHP-DEV] how to catch '=' operations on objects

[Andi Gutmans]

You have to do echo $obj->serialize().
It's just an additional few characters to type :)

Andi

At 05:54 PM 1/27/2001 +0100, Harald Radi wrote:
>hi,
>
>i've written an extension and want the following:
>
>
>
>$var = new myObject();
>
>$echo $var->elem;   // the 
>php_myObject_property_handler() is called and i
>can return the value
>
>$echo $var  // php prints out 'Object' , but i 
>whish to serialize my
>object and deliver a string
>_
>
>
>is this possible or do i always have to call something like echo
>$var->serialize(); ?
>
>harald.
>
>resistance is futile - nme.at
>
>
>--
>PHP Development Mailing List 
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8950: php_mysql_do_connect -> parameter host modified when using port or socket

[jiri . kaderavek]

From: [EMAIL PROTECTED]
Operating system: Linux
PHP version:  4.0.4pl1
PHP Bug Type: MySQL related
Bug description:  php_mysql_do_connect -> parameter host modified when using port 
or socket




-- 
Edit Bug report at: http://bugs.php.net/?id=8950&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8951: php_mysql_do_connect -> parameter host modified when using port or socket

[jiri . kaderavek]

From: [EMAIL PROTECTED]
Operating system: Linux
PHP version:  4.0.4pl1
PHP Bug Type: MySQL related
Bug description:  php_mysql_do_connect -> parameter host modified when using port 
or socket

Parameter $host is modified in function php_mysql_do_connect(). Example:

$host = "localhost:/tmp/mysql.sock";
$conn = mysql_connect($host .
echo $host;

Output is: localhost/tmp/mysql.sock 
because of replacing of ":" charcter by null char in
this part of php_mysql_do_connect

===

static void php_mysql_do_connect(INTERNAL_FUNCTION_PARAMETERS,int persistent)
{   
char *user,*passwd,*host,*socket=NULL,*tmp;
char *hashed_details;
int hashed_details_length,port = MYSQL_PORT;

/* We cannot use mysql_port anymore in windows, need to use
 * mysql_real_connect() to set the port.
 */

 if (host && (tmp=strchr(host,':'))) {
*tmp=0;
tmp++;
if (tmp[0] != '/') {
port = atoi(tmp);
} else {
socket = tmp;
}
.
}

===


solution:
copying of *host content through *host2 pointer

===


static void php_mysql_do_connect(INTERNAL_FUNCTION_PARAMETERS,int persistent)
{   
char *user,*passwd,*host,*socket=NULL,*tmp,*host2;
char *hashed_details;
int hashed_details_length,port = MYSQL_PORT;

/* We cannot use mysql_port anymore in windows, need to use
 * mysql_real_connect() to set the port.
 */

host2 = (char *) emalloc(strlen(SAFE_STRING(host) + 1));
strcpy(host2, host);
host = host2;

 if (host && (tmp=strchr(host,':'))) {
*tmp=0;
tmp++;
if (tmp[0] != '/') {
port = atoi(tmp);
} else {
socket = tmp;
}
...
}


-- 
Edit Bug report at: http://bugs.php.net/?id=8951&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] security hole reported by freshmeet

[moshe doron]

http://freshmeat.net/news/2001/01/27/980597363.html

where can i find any references?

tnx
moshe.

--





-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] security hole reported by freshmeet

[Rasmus Lerdorf]

The reference is right in the link you posted.  Just upgrade to the latest
version to address it.

On Sat, 27 Jan 2001, moshe doron wrote:

> http://freshmeat.net/news/2001/01/27/980597363.html
>
> where can i find any references?
>
> tnx
> moshe.
>
> --
>
>
>
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] error_log doesn't use file locking

[Ivan Petrovic]

Bug or feature in all php versions?

If couple of users trigger error_log() in the same time - the output file
becomes garbled.

It should be nice to have flock with timeout. Is there some kind of alarm
(like in C) suitable for this?


Regards
Ivan






-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] security hole reported by freshmeet

[moshe doron]

the problem here is, that i have problem to update some servers  contains my
code coz them not in my ownship, so i just have to test if this bug affected
them (if yep i'll temply remove the the file from the server) but no
explains.

does that subject stay in darken till monday not to give hackers the chance
to exploite it during the weekend?

btw, ll' there official php4.0.4pl2 on php.net that time?

tnx
moshe.

--


"Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> The reference is right in the link you posted.  Just upgrade to the latest
> version to address it.
>
> On Sat, 27 Jan 2001, moshe doron wrote:
>
> > http://freshmeat.net/news/2001/01/27/980597363.html
> >
> > where can i find any references?
> >
> > tnx
> > moshe.
> >
> > --
> >
> >
> >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8952: PHP Installs With PNG, Apache Doesn't

[kevin]

From: [EMAIL PROTECTED]
Operating system: FreeBSD 3.4
PHP version:  4.0.4pl1
PHP Bug Type: Compile Problem
Bug description:  PHP Installs With PNG, Apache Doesn't

I finally got PHP to compile with GD 1.8.3 on my system, but apache won't compile now.

Here is relevant info from an apache make:
<=== src/modules
gcc -c  -I./os/unix -I./include -I/usr/local  -funsigned-char 
-I/usr/local/installs/web_stuff/php-4.0.4pl1 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1 -DUSE_EXPAT -I./lib/expat-lite 
-DNO_DL_NEEDED `./apaci` modules.c
gcc -c  -I./os/unix -I./include -I/usr/local  -funsigned-char 
-I/usr/local/installs/web_stuff/php-4.0.4pl1 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1 -DUSE_EXPAT -I./lib/expat-lite 
-DNO_DL_NEEDED `./apaci` buildmark.c
gcc  -funsigned-char -I/usr/local/installs/web_stuff/php-4.0.4pl1 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/main 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/Zend 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1/TSRM 
-I/usr/local/installs/web_stuff/php-4.0.4pl1 -DUSE_EXPAT -I./lib/expat-lite 
-DNO_DL_NEEDED `./apaci` -o httpd buildmark.o modules.o  
modules/standard/libstandard.a  modules/php4/libphp4.a  main/libmain.a  
./os/unix/libos.a  ap/libap.a  lib/expat-lite/libexpat.a 
-L/usr/local/installs/web_stuff/libpng-1.07/ -lpng -R/usr/local//lib -R/usr/local/lib 
-R/usr/local/lib/mysql -R/usr/local/pgsql//lib  -rdynamic -L/usr/local//lib 
-L/usr/local/lib -L/usr/local/lib/mysql -L/usr/local/pgsql//lib -Lmodules/php4 
-L../modules/php4 -L../../modules/php4 -lmodphp4  -lpam  -lpq -lmysqlclient -lttf 
-lpng -lz -lgd -ljpeg -lm -lcrypt  -L/usr/local//lib -ljpeg   -lcrypt
/usr/local//lib/libgd.a(gd_png.o): In function `gdPngErrorHandler':
gd_png.o(.text+0x25): undefined reference to `png_get_error_ptr'
/usr/local//lib/libgd.a(gd_png.o): In function `gdPngReadData':
gd_png.o(.text+0x67): undefined reference to `png_get_io_ptr'
/usr/local//lib/libgd.a(gd_png.o): In function `gdPngWriteData':
gd_png.o(.text+0x8b): undefined reference to `png_get_io_ptr'
/usr/local//lib/libgd.a(gd_png.o): In function `gdImageCreateFromPngCtx':
gd_png.o(.text+0x105): undefined reference to `png_check_sig'
gd_png.o(.text+0x12e): undefined reference to `png_create_read_struct'
gd_png.o(.text+0x158): undefined reference to `png_create_info_struct'
gd_png.o(.text+0x1a2): undefined reference to `png_set_sig_bytes'
gd_png.o(.text+0x1b2): undefined reference to `png_set_read_fn'
gd_png.o(.text+0x1bd): undefined reference to `png_read_info'
gd_png.o(.text+0x1e0): undefined reference to `png_get_IHDR'
gd_png.o(.text+0x1f1): undefined reference to `png_set_strip_16'
gd_png.o(.text+0x202): undefined reference to `png_set_packing'
gd_png.o(.text+0x222): undefined reference to `png_set_strip_alpha'
gd_png.o(.text+0x26b): undefined reference to `png_get_PLTE'
gd_png.o(.text+0x278): undefined reference to `png_get_valid'
gd_png.o(.text+0x2ad): undefined reference to `png_get_tRNS'
gd_png.o(.text+0x3c2): undefined reference to `png_get_valid'
gd_png.o(.text+0x3e0): undefined reference to `png_get_tRNS'
gd_png.o(.text+0x443): undefined reference to `png_get_valid'
gd_png.o(.text+0x45d): undefined reference to `png_get_tRNS'
gd_png.o(.text+0x53d): undefined reference to `png_set_dither'
gd_png.o(.text+0x54b): undefined reference to `png_read_update_info'
gd_png.o(.text+0x556): undefined reference to `png_get_rowbytes'
gd_png.o(.text+0x58a): undefined reference to `png_destroy_read_struct'
gd_png.o(.text+0x5cb): undefined reference to `png_destroy_read_struct'
gd_png.o(.text+0x5f7): undefined reference to `png_read_image'
gd_png.o(.text+0x601): undefined reference to `png_read_end'
gd_png.o(.text+0x633): undefined reference to `png_destroy_read_struct'
gd_png.o(.text+0x6e6): undefined reference to `png_destroy_read_struct'
/usr/local//lib/libgd.a(gd_png.o): In function `gdImagePngCtx':
gd_png.o(.text+0x821): undefined reference to `png_create_write_struct'
gd_png.o(.text+0x84f): undefined reference to `png_create_info_struct'
gd_png.o(.text+0x8b4): undefined reference to `png_set_write_fn'
gd_png.o(.text+0x9b6): undefined reference to `png_set_IHDR'
gd_png.o(.text+0xa2d): undefined reference to `png_set_tRNS'
gd_png.o(.text+0xaf1): 

Re: [PHP-DEV] security hole reported by freshmeet

[Rasmus Lerdorf]

pl2?  This advisory has been out for over a week and the problem is fixed
in 4.0.4pl1

-Rasmus

On Sat, 27 Jan 2001, moshe doron wrote:

> the problem here is, that i have problem to update some servers  contains my
> code coz them not in my ownship, so i just have to test if this bug affected
> them (if yep i'll temply remove the the file from the server) but no
> explains.
>
> does that subject stay in darken till monday not to give hackers the chance
> to exploite it during the weekend?
>
> btw, ll' there official php4.0.4pl2 on php.net that time?
>
> tnx
> moshe.
>
> --
>
>
> "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > The reference is right in the link you posted.  Just upgrade to the latest
> > version to address it.
> >
> > On Sat, 27 Jan 2001, moshe doron wrote:
> >
> > > http://freshmeat.net/news/2001/01/27/980597363.html
> > >
> > > where can i find any references?
> > >
> > > tnx
> > > moshe.
> > >
> > > --
> > >
> > >
> > >
> > >
> > >
> > > --
> > > PHP Development Mailing List 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> > >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] ooops, i thought it new one but:

[moshe doron]

in debian, they say this bug affecting also 3pl1, but its not what i fount
on php.net.
can i be relexed if the servers i using runing 3pl1?

--


"Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> pl2?  This advisory has been out for over a week and the problem is fixed
> in 4.0.4pl1
>
> -Rasmus
>
> On Sat, 27 Jan 2001, moshe doron wrote:
>
> > the problem here is, that i have problem to update some servers
contains my
> > code coz them not in my ownship, so i just have to test if this bug
affected
> > them (if yep i'll temply remove the the file from the server) but no
> > explains.
> >
> > does that subject stay in darken till monday not to give hackers the
chance
> > to exploite it during the weekend?
> >
> > btw, ll' there official php4.0.4pl2 on php.net that time?
> >
> > tnx
> > moshe.
> >
> > --
> >
> >
> > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > The reference is right in the link you posted.  Just upgrade to the
latest
> > > version to address it.
> > >
> > > On Sat, 27 Jan 2001, moshe doron wrote:
> > >
> > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > >
> > > > where can i find any references?
> > > >
> > > > tnx
> > > > moshe.
> > > >
> > > > --
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > PHP Development Mailing List 
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > To contact the list administrators, e-mail:
[EMAIL PROTECTED]
> > > >
> > >
> > >
> > > --
> > > PHP Development Mailing List 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > To contact the list administrators, e-mail:
[EMAIL PROTECTED]
> > >
> >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] ooops, i thought it new one but:

[Rasmus Lerdorf]

4.0.4pl1 has the fix

On Sat, 27 Jan 2001, moshe doron wrote:

> in debian, they say this bug affecting also 3pl1, but its not what i fount
> on php.net.
> can i be relexed if the servers i using runing 3pl1?
>
> --
>
>
> "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > pl2?  This advisory has been out for over a week and the problem is fixed
> > in 4.0.4pl1
> >
> > -Rasmus
> >
> > On Sat, 27 Jan 2001, moshe doron wrote:
> >
> > > the problem here is, that i have problem to update some servers
> contains my
> > > code coz them not in my ownship, so i just have to test if this bug
> affected
> > > them (if yep i'll temply remove the the file from the server) but no
> > > explains.
> > >
> > > does that subject stay in darken till monday not to give hackers the
> chance
> > > to exploite it during the weekend?
> > >
> > > btw, ll' there official php4.0.4pl2 on php.net that time?
> > >
> > > tnx
> > > moshe.
> > >
> > > --
> > >
> > >
> > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > The reference is right in the link you posted.  Just upgrade to the
> latest
> > > > version to address it.
> > > >
> > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > >
> > > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > > >
> > > > > where can i find any references?
> > > > >
> > > > > tnx
> > > > > moshe.
> > > > >
> > > > > --
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > PHP Development Mailing List 
> > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
> > > > >
> > > >
> > > >
> > > > --
> > > > PHP Development Mailing List 
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
> > > >
> > >
> > >
> > >
> > > --
> > > PHP Development Mailing List 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> > >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] ooops, i thought it new one but:

[Sebastian Bergmann]

moshe doron wrote:
> can i be relexed if the servers i using runing 3pl1?

  No, Rasmus was refering to PHP 4.0.4pl1.

-- 
 sebastian bergmann e-mail :  [EMAIL PROTECTED]
  homepage :  http://www.sebastian-bergmann.de
   make a gift : http://wishlist.sebastian-bergmann.de
 measure the usability of your web application -> http://phpOpenTracker.de

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Problem with sessions!

[Adrian Pitulac]

I have Apache 1.3.14 and Php 4.0.4 on RedHat Linux 
7.0!
 
I started a session from a html and i receive the 
following message:
 
Warning: Cannot send session cache limiter - 
headers already sent (output started at ../x.php:4) in /x.php on 
line zz
 
Can you help me?
 
Thanks!

RE: [PHP-DEV] ooops, i thought it new one but:

[James Moore]

No. the bug was localised after the release of PHP 4.0.4 that is the reason
why we released the Security Advisory and PHP 4.0.4pl1 so if you think that
your servers could be affected you SHOULD upgrade to PHP 4.0.4pl1. It
affects ALL versions of PHP 4 up to PHP 4.0.4, you should read the Advisory
carefully and see the corresponding posts on Bugtraq for further
information. Security Focus is currently down but check on securityfocus.com
next week and read about it.

Basically:
Issues only affect mod_php4 in apache

=> The issue that php_value engine off can propagate
   from virtual host to virtual host can be easy worked
   around by adding php_value engine on to your DEFAULT
   server config in httpd.conf.

=> The second issue where php directives can be set
   from request to request has questionable real world
   use but is still a security issue. IIRC you can
   prevent this to a certain extent by disallowing
   OPTIONS requests in your httpd.conf

Doing the above will not guarantee that your system is safe but it will
enable you check the security advisory and then make a decision on whether
an upgrade is necessary.


James
--
James Moore
PHP Quality Assurance Team
[EMAIL PROTECTED]

> -Original Message-
> From: moshe doron [mailto:[EMAIL PROTECTED]]
> Sent: 27 January 2001 19:30
> To: [EMAIL PROTECTED]
> Subject: [PHP-DEV] ooops, i thought it new one but:
>
>
> in debian, they say this bug affecting also 3pl1, but its not what i fount
> on php.net.
> can i be relexed if the servers i using runing 3pl1?
>
> --
>
>
> "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > pl2?  This advisory has been out for over a week and the
> problem is fixed
> > in 4.0.4pl1
> >
> > -Rasmus
> >
> > On Sat, 27 Jan 2001, moshe doron wrote:
> >
> > > the problem here is, that i have problem to update some servers
> contains my
> > > code coz them not in my ownship, so i just have to test if this bug
> affected
> > > them (if yep i'll temply remove the the file from the server) but no
> > > explains.
> > >
> > > does that subject stay in darken till monday not to give hackers the
> chance
> > > to exploite it during the weekend?
> > >
> > > btw, ll' there official php4.0.4pl2 on php.net that time?
> > >
> > > tnx
> > > moshe.
> > >
> > > --
> > >
> > >
> > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > The reference is right in the link you posted.  Just upgrade to the
> latest
> > > > version to address it.
> > > >
> > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > >
> > > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > > >
> > > > > where can i find any references?
> > > > >
> > > > > tnx
> > > > > moshe.
> > > > >
> > > > > --
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > PHP Development Mailing List 
> > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
> > > > >
> > > >
> > > >
> > > > --
> > > > PHP Development Mailing List 
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
> > > >
> > >
> > >
> > >
> > > --
> > > PHP Development Mailing List 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > To contact the list administrators, e-mail:
> [EMAIL PROTECTED]
> > >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] register_shutdown_function() not working ?

[Andrew Sitnikov]

Hello php-general,

 Why this not working (php.4.0.4pl1_Linux)?
 


file have only  "Funct1" ?

Best regards,
 Andrew Sitnikov 
 e-mail : [EMAIL PROTECTED]
 GSM: (+372) 56491109



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

RE: [PHP-DEV] ooops, i thought it new one but:

[Andi Gutmans]

Moshe,

It's quite difficult to exploit this vulnerability without knowing your 
servers setup. It is possible, but personally I wouldn't worry too much 
about it although you should urge your ISP to upgrade to 4.0.4pl1.

Andi

At 08:07 PM 1/27/2001 +, James Moore wrote:
>No. the bug was localised after the release of PHP 4.0.4 that is the reason
>why we released the Security Advisory and PHP 4.0.4pl1 so if you think that
>your servers could be affected you SHOULD upgrade to PHP 4.0.4pl1. It
>affects ALL versions of PHP 4 up to PHP 4.0.4, you should read the Advisory
>carefully and see the corresponding posts on Bugtraq for further
>information. Security Focus is currently down but check on securityfocus.com
>next week and read about it.
>
>Basically:
> Issues only affect mod_php4 in apache
>
> => The issue that php_value engine off can propagate
>from virtual host to virtual host can be easy worked
>around by adding php_value engine on to your DEFAULT
>server config in httpd.conf.
>
> => The second issue where php directives can be set
>from request to request has questionable real world
>use but is still a security issue. IIRC you can
>prevent this to a certain extent by disallowing
>OPTIONS requests in your httpd.conf
>
>Doing the above will not guarantee that your system is safe but it will
>enable you check the security advisory and then make a decision on whether
>an upgrade is necessary.
>
>
>James
>--
>James Moore
>PHP Quality Assurance Team
>[EMAIL PROTECTED]
>
> > -Original Message-
> > From: moshe doron [mailto:[EMAIL PROTECTED]]
> > Sent: 27 January 2001 19:30
> > To: [EMAIL PROTECTED]
> > Subject: [PHP-DEV] ooops, i thought it new one but:
> >
> >
> > in debian, they say this bug affecting also 3pl1, but its not what i fount
> > on php.net.
> > can i be relexed if the servers i using runing 3pl1?
> >
> > --
> >
> >
> > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > pl2?  This advisory has been out for over a week and the
> > problem is fixed
> > > in 4.0.4pl1
> > >
> > > -Rasmus
> > >
> > > On Sat, 27 Jan 2001, moshe doron wrote:
> > >
> > > > the problem here is, that i have problem to update some servers
> > contains my
> > > > code coz them not in my ownship, so i just have to test if this bug
> > affected
> > > > them (if yep i'll temply remove the the file from the server) but no
> > > > explains.
> > > >
> > > > does that subject stay in darken till monday not to give hackers the
> > chance
> > > > to exploite it during the weekend?
> > > >
> > > > btw, ll' there official php4.0.4pl2 on php.net that time?
> > > >
> > > > tnx
> > > > moshe.
> > > >
> > > > --
> > > >
> > > >
> > > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > The reference is right in the link you posted.  Just upgrade to the
> > latest
> > > > > version to address it.
> > > > >
> > > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > > >
> > > > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > > > >
> > > > > > where can i find any references?
> > > > > >
> > > > > > tnx
> > > > > > moshe.
> > > > > >
> > > > > > --
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > PHP Development Mailing List 
> > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > > To contact the list administrators, e-mail:
> > [EMAIL PROTECTED]
> > > > > >
> > > > >
> > > > >
> > > > > --
> > > > > PHP Development Mailing List 
> > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > To contact the list administrators, e-mail:
> > [EMAIL PROTECTED]
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > PHP Development Mailing List 
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > To contact the list administrators, e-mail:
> > [EMAIL PROTECTED]
> > > >
> > >
> > >
> > > --
> > > PHP Development Mailing List 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> > >
> >
> >
> >
> > --
> > PHP Development Mailing List 
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
>
>
>--
>PHP Development Mailing List 
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP Development Mailing List 

[PHP-DEV] PHP 4.0 Bug #8953: in_array returning number of 'hits'

[melvyn]

From: [EMAIL PROTECTED]
Operating system: any
PHP version:  4.0.4pl1
PHP Bug Type: Feature/Change Request
Bug description:  in_array returning number of 'hits'

I'd like to see in_array returning the number of values matching, instead of just 
true/false.

IMHO, it would not create any backwards compatibility problems, since 0 equals false 
anyway and > 0 equals true.

It would make constructing dual-parameter descisions much easier.

For example - a bounce script, where "bounce_count / day" > 6 AND "bounces /week" = 5.

This is very hard to do now, but with in_array returning the number of hits, it takes 
out at least 2 loops and a seperate "counts" array.


-- 
Edit Bug report at: http://bugs.php.net/?id=8953&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] ooops, i thought it new one but:

[moshe doron]

thanks u all.
i just became too pressured by freshmeet message, in the future i'll take
more care before badger u with paranoid questions ;|

moshe.

--


"Andi Gutmans" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Moshe,
>
> It's quite difficult to exploit this vulnerability without knowing your
> servers setup. It is possible, but personally I wouldn't worry too much
> about it although you should urge your ISP to upgrade to 4.0.4pl1.
>
> Andi
>
> At 08:07 PM 1/27/2001 +, James Moore wrote:
> >No. the bug was localised after the release of PHP 4.0.4 that is the
reason
> >why we released the Security Advisory and PHP 4.0.4pl1 so if you think
that
> >your servers could be affected you SHOULD upgrade to PHP 4.0.4pl1. It
> >affects ALL versions of PHP 4 up to PHP 4.0.4, you should read the
Advisory
> >carefully and see the corresponding posts on Bugtraq for further
> >information. Security Focus is currently down but check on
securityfocus.com
> >next week and read about it.
> >
> >Basically:
> > Issues only affect mod_php4 in apache
> >
> > => The issue that php_value engine off can propagate
> >from virtual host to virtual host can be easy worked
> >around by adding php_value engine on to your DEFAULT
> >server config in httpd.conf.
> >
> > => The second issue where php directives can be set
> >from request to request has questionable real world
> >use but is still a security issue. IIRC you can
> >prevent this to a certain extent by disallowing
> >OPTIONS requests in your httpd.conf
> >
> >Doing the above will not guarantee that your system is safe but it will
> >enable you check the security advisory and then make a decision on
whether
> >an upgrade is necessary.
> >
> >
> >James
> >--
> >James Moore
> >PHP Quality Assurance Team
> >[EMAIL PROTECTED]
> >
> > > -Original Message-
> > > From: moshe doron [mailto:[EMAIL PROTECTED]]
> > > Sent: 27 January 2001 19:30
> > > To: [EMAIL PROTECTED]
> > > Subject: [PHP-DEV] ooops, i thought it new one but:
> > >
> > >
> > > in debian, they say this bug affecting also 3pl1, but its not what i
fount
> > > on php.net.
> > > can i be relexed if the servers i using runing 3pl1?
> > >
> > > --
> > >
> > >
> > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > pl2?  This advisory has been out for over a week and the
> > > problem is fixed
> > > > in 4.0.4pl1
> > > >
> > > > -Rasmus
> > > >
> > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > >
> > > > > the problem here is, that i have problem to update some servers
> > > contains my
> > > > > code coz them not in my ownship, so i just have to test if this
bug
> > > affected
> > > > > them (if yep i'll temply remove the the file from the server) but
no
> > > > > explains.
> > > > >
> > > > > does that subject stay in darken till monday not to give hackers
the
> > > chance
> > > > > to exploite it during the weekend?
> > > > >
> > > > > btw, ll' there official php4.0.4pl2 on php.net that time?
> > > > >
> > > > > tnx
> > > > > moshe.
> > > > >
> > > > > --
> > > > >
> > > > >
> > > > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > > >
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > > The reference is right in the link you posted.  Just upgrade to
the
> > > latest
> > > > > > version to address it.
> > > > > >
> > > > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > > > >
> > > > > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > > > > >
> > > > > > > where can i find any references?
> > > > > > >
> > > > > > > tnx
> > > > > > > moshe.
> > > > > > >
> > > > > > > --
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > PHP Development Mailing List 
> > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > > > To contact the list administrators, e-mail:
> > > [EMAIL PROTECTED]
> > > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > PHP Development Mailing List 
> > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > > To contact the list administrators, e-mail:
> > > [EMAIL PROTECTED]
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > PHP Development Mailing List 
> > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > To contact the list administrators, e-mail:
> > > [EMAIL PROTECTED]
> > > > >
> > > >
> > > >
> > > > --
> > > > PHP Development Mailing List 
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > To contact the list administrators, e

[PHP-DEV] using PEAR and safe_mode at the same time (long)

[Balazs Nagy]

Hi,

I work for a web hosting / ASP / linux company, and my last problem is using
a standard library (which can be accessed by any php users, like PEAR), and
keeping the secret of other directories.

Solution for the first problem is 'include_path = ".:/path/to/shared/libs",'
and for the second one is 'safe_mode = on.'

Well, it's good enough but there's a little glitch: file ownership.  In safe
mode the interpreter refuses opening files which owner uid is not the same
as the running script's. Eg. I have to copy the stdlib (ohh, those wonderful
days of MudOS mudlib writing!) for each user of each virtual hosts.

I think a safe_mode_checkuid flag would solve the problem.

In stock php 4.0.4pl1 safe_mode is checked by

- sapi/apache/php_apache: AUTHORIZATION env.var is not serviced
- main/fopen-wrappers: fopen wrappers checks for same userid
- main/main: set_time_limit is blocked
- ext/standard/basic_functions: handles safe_mode_(allowed|protected)_env_vars
- ext/standard/dl: dl is blocked
- ext/standard/exec: exec is restricted to safe_mode_exec_dir and ``s are
  blocked
- ext/standard/file: popen is restricted to safe_mode_exec_dir
  mkdir, rmdir, rename, unlink, copy are privileges-checked
- ext/standard/filestat: chkgrp, chown, chmod, touch are privileges-checked 
  chmod is limited to 0777 (no special rights)
- ext/standard/link: symlink, link are privileges-checked
- ext/posix/posix: mkfifo is privileges-checked
- ext/pgsql/pgsql: pg_loimport is privileges-checked
- ext/filepro/filepro: filepro, filepro_rowcount, filepro_retrieve are
  privileges-checked
- ext/dbase/dbase: dbase_open, dbase_create are privileges-checked
- ext/db/db: dbmopen is privileges-checked

Check/block summary

env.var block:
  - AUTHORIZATION (only in apache SAPI)
function block:
  - dl
  - set_time_limit
function restrictions: 
  - safe_mode_allowed_env_vars
  - safe_mode_protected_env_vars
privileges
  - sanity checks
mkdir, rmdir, rename, unlink, copy, chkgrp, chown, chmod, touch,
symlink, link, mkfifo, pg_loimport, filepro, filepro_rowcount,
filepro_retrieve, dbase_open, dbase_create, dbmopen
  - special access permissions block
chmod
  - userid checks
fopen

Conclusion

Some things are must-have in safe_mode, but I would put an own flag for each
type (well, the privilege sanity checks don't do any bad, so this type
doesn't need another flag).

Comments? Implementations?
-- 
Nagy Balazs, LSC
http://www.lsc.hu/

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] com support win32

[Harald Radi]

hi,

now i've more or less fixed all open com-related bugs.
i've written an additional VARIANT module that represents the C VARIANT
Datatype.
now you can pass this to the com-method and all works fine ...

short example:

value;   // ->value delivers 
the actual content of the
VARIANT, ro

$var->bstrVal = "abc";  // all the VARIANT attributes 
are supportet, wo
$var->pbstrVal = "bcd";
$var->lVal = 26;

echo $var->value;

$cpx->CPXExecute(0x0301, 2, 5, "", $var);

echo $var->value;   // shows the result 
from the function call above
?>


are there any objections ? whom should i send the sources ? how should i
document the new functionalities ?

harald.

resistance is futile - nme.at


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8885 Updated: Child processes hang on exit

[nick]

ID: 8885
User Update by: [EMAIL PROTECTED]
Status: Open
Bug Type: Reproduceable crash
Description: Child processes hang on exit

More info...  If I don't compile ttf into gd, it doesn't crash...

Previous Comments:
---

[2001-01-24 10:54:07] [EMAIL PROTECTED]
Child (or the main) processes hang whenever they try to exit.

This will happen when
maxrequestsperchild is reached (I'm assuming) and a child tries to die naturally
a child process is killed manually
the main process can't bind to port/etc

Here's a ps to see what it looks like

USER   PID %CPU %MEM   VSZ  RSS  TT  STAT STARTED   TIME COMMAND
www443   14066  5.6  0.3  6220  988  ??  R 8:00AM0:06.52 /var/www443/bin/httpd
www443   14067  5.3  0.3  6216 1000  ??  R 8:00AM0:07.20 /var/www443/bin/httpd
www443   14063  5.4  0.3  6220 1000  ??  R 8:00AM0:07.17 /var/www443/bin/httpd
www443   14065  5.4  0.3  6212  980  ??  R 8:00AM0:06.63 /var/www443/bin/httpd
www443   14064  5.5  0.3  6216 1004  ??  R 8:00AM0:07.57 /var/www443/bin/httpd
www443   19823  5.9  0.2  6032  608  ??  R 8:26AM9:31.91 /var/www443/bin/httpd
root 14027  0.0  0.1  6032  404  ??  Ss8:00AM0:00.18 /var/www443/bin/httpd
www443   14322  0.0  0.2  6208  724  ??  S 8:01AM0:00.22 /var/www443/bin/httpd
www443   14346  0.0  0.2  6208  736  ??  S 8:01AM0:00.23 /var/www443/bin/httpd
www443   19726  0.0  0.2  6212  744  ??  S 8:25AM0:00.17 /var/www443/bin/httpd
www443   19732  0.0  0.2  6212  732  ??  S 8:25AM0:00.14 /var/www443/bin/httpd
www443   19733  0.0  0.2  6212  724  ??  S 8:25AM0:00.09 /var/www443/bin/httpd

as you can see, the top 5 processes are hung.  A sigkill is the only way to kill them.

Attaching to one of the hung processes with gdb gives the backtrace listed at the
bottom of this report.


We can only produce this problem with the following configuration:

(Apache 1.3.12 or 1.3.14)
./configure --prefix=$prefix --with-port=$port --enable-module=most 
 --enable-module=rewrite --enable-module=status --with-layout=Apache 
 --sysconfdir=$prefix/conf --enable-module=so

(mod_ssl 2.6.5-1.3.12 or x.x.x-1.3.14)
./configure --with-apache=../apache_1.3.12 --prefix=/var/www443 
--with-ssl=/usr/local/ssl

(php 4.0.1 - 4.0.4pl1)
./configure  --with-mysql --with-xml --with-gd=/usr/local 
 --with-apxs=/var/www443/bin/apxs --enable-track-vars --enable-bcmath 
 --enable-ftp --with-jpeg-dir=/usr/local/lib --with-ttf

If we leave out PHP or mod_ssl, the problem goes away.
Also, with older versions of BSDi, this problem does not occure. (using the same 
configuration as above)



Attaching to program `/var/www443/bin/httpd', process 19823
Reading symbols from /shlib/libdl.so...done.
Reading symbols from /shlib/libgcc.so.1...done.
Reading symbols from /shlib/libc.so.1...done.
Reading symbols from /shlib/ld-bsdi.so...done.
Reading symbols from /var/www443/libexec/libphp4.so...done.
Reading symbols from /usr/local/lib/libttf.so.2...done.
Reading symbols from /shlib/libm.so.0.0...done.
0x481a5a54 in __deregister_frame_info ()
(gdb) bt
#0  0x481a5a54 in __deregister_frame_info ()
#1  0x8069e7a in __do_global_dtors_aux ()
#2  0x8163fa4 in _fini ()
#3  0x48248028 in exit ()
#4  0x80c3e1f in clean_child_exit (code=0) at http_main.c:517
#5  0x80c6ac2 in child_main (child_num_arg=10) at http_main.c:4057
#6  0x80c6f8c in make_child (s=0x81ad034, slot=10, now=980349966) at http_main.c:4435
#7  0x80c7305 in perform_idle_server_maintenance () at http_main.c:4599
#8  0x80c77f5 in standalone_main (argc=1, argv=0x8047ec4) at http_main.c:4831
#9  0x80c7dc3 in main (argc=1, argv=0x8047ec4) at http_main.c:5092
#10 0x8069e37 in __start ()
(gdb) quit


# /var/www443/bin/httpd -l
Compiled-in modules:
  http_core.c
  mod_vhost_alias.c
  mod_env.c
  mod_define.c
  mod_log_config.c
  mod_mime_magic.c
  mod_mime.c
  mod_negotiation.c
  mod_status.c
  mod_info.c
  mod_include.c
  mod_autoindex.c
  mod_dir.c
  mod_cgi.c
  mod_asis.c
  mod_imap.c
  mod_actions.c
  mod_speling.c
  mod_userdir.c
  mod_alias.c
  mod_rewrite.c
  mod_access.c
  mod_auth.c
  mod_auth_anon.c
  mod_auth_dbm.c
  mod_digest.c
  mod_proxy.c
  mod_cern_meta.c
  mod_expires.c
  mod_headers.c
  mod_usertrack.c
  mod_unique_id.c
  mod_so.c
  mod_setenvif.c
  mod_ssl.c
  mod_frontpage.c

---


Full Bug description available at: http://bugs.php.net/?id=8885


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Re: [PHP] register_shutdown_function() not working ?

[Andrew Sitnikov]

Hello Andrew,

Sorry, but i forget what I have Zend Debuger :)

Problem in file path, when i use absolute path
/home/user/tmp/tmp/text.txt all works.

It appears, that in shutdown_function getcwd () == '/',
but in script getcwd () == '/home/user/public_html/'

Only not clearly why.


AS> Hello php-general,

AS>  Why this not working (php.4.0.4pl1_Linux)?
 
AS>   error_reporting(E_ALL);

AS>  $file_name = '../tmp/text.txt';

AS>  function funct1(){
AS>global $file_name;
AS>if ($fd = fopen($file_name,'a+')){
AS>  fwrite($fd,"Funct1\n");
AS>  fclose($fd);
AS>}else{
AS>  die("Can not open output file");
AS>}
AS>  }

AS>  function funct2(){
AS>global $file_name;
AS>if ($fd = fopen($file_name,'a+')){
AS>  fwrite($fd,"Funct2\n");
AS>  fclose($fd);
AS>}
AS>  }

AS>  $i = register_shutdown_function('funct2');
AS>  funct1();
?>>

AS> file have only  "Funct1" ?

AS> Best regards,
AS>  Andrew Sitnikov 
AS>  e-mail : [EMAIL PROTECTED]
AS>  GSM: (+372) 56491109






Best regards,
 Andrew Sitnikov 
 e-mail : [EMAIL PROTECTED]
 GSM: (+372) 56491109



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

RE: [PHP-DEV] ooops, i thought it new one but:

[James Moore]

Paranoid is fine but you can be assured that in cases like this as soon as
the bug is localised then the Dev team will fix the problem and as soon as
we have made sure the fix works and have tested it sufficently we issue a
security advisory and a path level/new release. Its better to be paranoid
than to be comprimised.

I personally would feel terrible if I knew that a bug in PHP that we knew
about had been exploited to steel information/credit cards etc and we hadnt
done everything we could to make sure the comunity and admins of systems
were informed.

James

> -Original Message-
> From: moshe doron [mailto:[EMAIL PROTECTED]]
> Sent: 27 January 2001 20:23
> To: [EMAIL PROTECTED]
> Subject: Re: [PHP-DEV] ooops, i thought it new one but:
>
>
> thanks u all.
> i just became too pressured by freshmeet message, in the future i'll take
> more care before badger u with paranoid questions ;|
>
> moshe.
>
> --
>
>
> "Andi Gutmans" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Moshe,
> >
> > It's quite difficult to exploit this vulnerability without knowing your
> > servers setup. It is possible, but personally I wouldn't worry too much
> > about it although you should urge your ISP to upgrade to 4.0.4pl1.
> >
> > Andi
> >
> > At 08:07 PM 1/27/2001 +, James Moore wrote:
> > >No. the bug was localised after the release of PHP 4.0.4 that is the
> reason
> > >why we released the Security Advisory and PHP 4.0.4pl1 so if you think
> that
> > >your servers could be affected you SHOULD upgrade to PHP 4.0.4pl1. It
> > >affects ALL versions of PHP 4 up to PHP 4.0.4, you should read the
> Advisory
> > >carefully and see the corresponding posts on Bugtraq for further
> > >information. Security Focus is currently down but check on
> securityfocus.com
> > >next week and read about it.
> > >
> > >Basically:
> > > Issues only affect mod_php4 in apache
> > >
> > > => The issue that php_value engine off can propagate
> > >from virtual host to virtual host can be easy worked
> > >around by adding php_value engine on to your DEFAULT
> > >server config in httpd.conf.
> > >
> > > => The second issue where php directives can be set
> > >from request to request has questionable real world
> > >use but is still a security issue. IIRC you can
> > >prevent this to a certain extent by disallowing
> > >OPTIONS requests in your httpd.conf
> > >
> > >Doing the above will not guarantee that your system is safe but it will
> > >enable you check the security advisory and then make a decision on
> whether
> > >an upgrade is necessary.
> > >
> > >
> > >James
> > >--
> > >James Moore
> > >PHP Quality Assurance Team
> > >[EMAIL PROTECTED]
> > >
> > > > -Original Message-
> > > > From: moshe doron [mailto:[EMAIL PROTECTED]]
> > > > Sent: 27 January 2001 19:30
> > > > To: [EMAIL PROTECTED]
> > > > Subject: [PHP-DEV] ooops, i thought it new one but:
> > > >
> > > >
> > > > in debian, they say this bug affecting also 3pl1, but its not what i
> fount
> > > > on php.net.
> > > > can i be relexed if the servers i using runing 3pl1?
> > > >
> > > > --
> > > >
> > > >
> > > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > pl2?  This advisory has been out for over a week and the
> > > > problem is fixed
> > > > > in 4.0.4pl1
> > > > >
> > > > > -Rasmus
> > > > >
> > > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > > >
> > > > > > the problem here is, that i have problem to update some servers
> > > > contains my
> > > > > > code coz them not in my ownship, so i just have to test if this
> bug
> > > > affected
> > > > > > them (if yep i'll temply remove the the file from the
> server) but
> no
> > > > > > explains.
> > > > > >
> > > > > > does that subject stay in darken till monday not to give hackers
> the
> > > > chance
> > > > > > to exploite it during the weekend?
> > > > > >
> > > > > > btw, ll' there official php4.0.4pl2 on php.net that time?
> > > > > >
> > > > > > tnx
> > > > > > moshe.
> > > > > >
> > > > > > --
> > > > > >
> > > > > >
> > > > > > "Rasmus Lerdorf" <[EMAIL PROTECTED]> wrote in message
> > > > > >
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > > > The reference is right in the link you posted.  Just
> upgrade to
> the
> > > > latest
> > > > > > > version to address it.
> > > > > > >
> > > > > > > On Sat, 27 Jan 2001, moshe doron wrote:
> > > > > > >
> > > > > > > > http://freshmeat.net/news/2001/01/27/980597363.html
> > > > > > > >
> > > > > > > > where can i find any references?
> > > > > > > >
> > > > > > > > tnx
> > > > > > > > moshe.
> > > > > > > >
> > > > > > > > --
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > --
> > > > > > > > PHP Development Mailing List 
> > > > > > > > To unsubscribe, e-mail: [EMAIL PROTE

[PHP-DEV] PHP 4.0 Bug #8954: compiling with sybase-ct fails

[jr]

From: [EMAIL PROTECTED]
Operating system: solaris 2.7
PHP version:  4.0.4pl1
PHP Bug Type: Compile Failure
Bug description:  compiling with sybase-ct fails

doing a make fails with the following output:

ld: fatal: library -lsybtcl: not found
ld: fatal: library -lcomn: not found
ld: fatal: library -lcs: not found
ld: fatal: library -lsybtcl: not found
ld: fatal: library -lcomn: not found
ld: fatal: library -lcs: not found
ld: fatal: File processing errors. No output written to php
collect2: ld returned 1 exit status
make[1]: *** [php] Error 1

the configure command used is:

./configure --with-mysql --with-sybase-ct=/usr/local/freetds --with-dom

mysql, freetds, and libxml have all been installed properly.


-- 
Edit Bug report at: http://bugs.php.net/?id=8954&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8950 Updated: php_mysql_do_connect -> parameter host modified when using port or socket

[derick]

ID: 8950
Updated by: derick
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Bogus
Bug Type: MySQL related
Assigned To: 
Comments:

8951 is the same with more info

Previous Comments:
---

[2001-01-27 12:38:12] [EMAIL PROTECTED]


---


Full Bug description available at: http://bugs.php.net/?id=8950


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Re: [PHP-DOC] Problem with sessions

[Derick Rethans]

On Sat, 27 Jan 2001, Lars Torben Wilson wrote:

>
> Yes, just make sure that you're not outputting *anything* (even blank
> these lists.


> Adrian Pitulac writes:
> > I have Apache 1.3.14 and Php 4.0.4 on RedHat Linux 7.0!
> >
> > I started a session from a html and i receive the following message:
> >
> > Warning: Cannot send session cache limiter - headers already sent
> > (output started at ../x.php:4) in /x.php on line zz


This looks like some curruption to me... so this _can_ be a bug.

Derick Rethans

-
  PHP: Scripting the Web - www.php.net - [EMAIL PROTECTED]
-
JDI Media Solutions - www.jdimedia.nl - [EMAIL PROTECTED]
 H.v. Tussenbroekstraat 1 - 6952 BL Dieren - The Netherlands
-


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] Re: [PHP-DOC] Problem with sessions

[Lars Torben Wilson]

Derick Rethans writes:
> On Sat, 27 Jan 2001, Lars Torben Wilson wrote:
> 
> >
> > Yes, just make sure that you're not outputting *anything* (even blank
> > these lists.
> 
> 
> > Adrian Pitulac writes:
> > > I have Apache 1.3.14 and Php 4.0.4 on RedHat Linux 7.0!
> > >
> > > I started a session from a html and i receive the following message:
> > >
> > > Warning: Cannot send session cache limiter - headers already sent
> > > (output started at ../x.php:4) in /x.php on line zz
> 
> 
> This looks like some curruption to me... so this _can_ be a bug.

True. In that case, the appropriate address is http://bugs.php.net.
 
> Derick Rethans
> 
> -
>   PHP: Scripting the Web - www.php.net - [EMAIL PROTECTED]
> -
> JDI Media Solutions - www.jdimedia.nl - [EMAIL PROTECTED]
>  H.v. Tussenbroekstraat 1 - 6952 BL Dieren - The Netherlands
> -

-- 
++
|Torben Wilson <[EMAIL PROTECTED]>Adcore Finland|
|http://www.coastnet.com/~torbenhttp://www.adcore.com|
|Ph: 1.604.709.0506 [EMAIL PROTECTED]|
++

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Re: [PHP-DOC] Problem with sessions

[Derick Rethans]

Never mind... I need more coffee.


Derick Rethans

-
  PHP: Scripting the Web - www.php.net - [EMAIL PROTECTED]
-
JDI Media Solutions - www.jdimedia.nl - [EMAIL PROTECTED]
 H.v. Tussenbroekstraat 1 - 6952 BL Dieren - The Netherlands
-


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8955: Libs loaded in wrong order: -lcrypto -lssl

[gaa]

From: [EMAIL PROTECTED]
Operating system: Solaris 2.6
PHP version:  4.0.4pl1
PHP Bug Type: *Install and Config
Bug description:  Libs loaded in wrong order: -lcrypto -lssl

When one tries to configure php with openssl, the
libraries are loaded in the wrong order.  The problem
is that AC_ADD_LIBRARY in configure.in uses a
first-in last-out mechanism.  Swap the order to fix.

Change:
AC_ADD_LIBRARY(ssl)
AC_ADD_LIBRARY(crypto)
To:
AC_ADD_LIBRARY(crypto)
AC_ADD_LIBRARY(ssl)




-- 
Edit Bug report at: http://bugs.php.net/?id=8955&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8956: Openldap 2.x may need "-lsasl"

[gaa]

From: [EMAIL PROTECTED]
Operating system: Solaris 2.6
PHP version:  4.0.4pl1
PHP Bug Type: *Install and Config
Bug description:  Openldap 2.x may need "-lsasl"

When one tries to configure php with openldap 2.x, one
may need -lsasl to link (depending upon how it was built).

Work around:
LIBS="-lsasl" ./configure ...



-- 
Edit Bug report at: http://bugs.php.net/?id=8956&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8957: Please use --prefix to find things

[gaa]

From: [EMAIL PROTECTED]
Operating system: Solaris 2.6
PHP version:  4.0.4pl1
PHP Bug Type: *Install and Config
Bug description:  Please use --prefix to find things

A suggestion:

Please use --prefix when looking for things.

I ran configure with many arguments like:
--with-mm=/my/prefix/directory
when the directory would not have been needed if either
the --prefix was tried first, or if it used the
CPPFLAGS and LDFLAGS and LIBS to find things.




-- 
Edit Bug report at: http://bugs.php.net/?id=8957&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8958: File uploads append Content-Type string

[medvitz]

From: [EMAIL PROTECTED]
Operating system: Linux - RedHat 7.0
PHP version:  4.0.4pl1
PHP Bug Type: Unknown/Other Function
Bug description:  File uploads append Content-Type string


Doing file uploads with php 4.0.4pl1 on RH7 (RedHat RPMs) appends the Content-Type: 
/x  line to the top of the files.

-- Medvitz




-- 
Edit Bug report at: http://bugs.php.net/?id=8958&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8959: Use of Zend Optimizer w/ CGI SAPI causes echo of #!php at script start

[pdoyle]

From: [EMAIL PROTECTED]
Operating system: Solaris 2.5.1
PHP version:  4.0.4pl1
PHP Bug Type: PHP options/info functions
Bug description:  Use of Zend Optimizer w/ CGI SAPI causes echo of #!php at script 
start

I have compiled and installed PHP 4.0.4pl1 without problems, and we run it as an 
external binary from our Web server (SAPI CGI).  

However, when I install the current Zend Optimizer and add the appropriate lines to 
the php.ini file:

zend_optimizer.optimization_level=15
zend_extension="/usr/runtime/src/lib/ZendOptimizer.so"

it now spits out the first line of any script the server runs, i.e., for a script such 
as:

#!.php
";
?>

it will produce as HTML output:

#!.php
Hello, world.

I have checked to make sure that it's only these lines in the php.ini file -- when 
they are removed, it works fine.

Please note that I had already seen bug #8898 (where this problem occurred for 
-anyone- using the SAPI CGI) and made the diff suggested by that author, which fixed 
the problem when I wasn't using the optimizer.  I suspect that use of the optimizer is 
sending the CGI SAPI down a different path to a similar bug but I haven't been able to 
track it down.



-- 
Edit Bug report at: http://bugs.php.net/?id=8959&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8960: Request for a more flexible Metaphone function

[roy]

From: [EMAIL PROTECTED]
Operating system: FreeBSD
PHP version:  4.0.4pl1
PHP Bug Type: Feature/Change Request
Bug description:  Request for a more flexible Metaphone function

I would like to suggest that the Metaphone function be a little bit more flexible.  I 
have heard (from the manual) that it is partly based on some english language rules, 
would it be possible to send a text-file with these configurations, and change the 
file in php.ini, or maybe a file which can be changed prior to compiling?

Any of the two would be very useful for people in other countries...

Thank you


-- 
Edit Bug report at: http://bugs.php.net/?id=8960&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8959 Updated: Use of Zend Optimizer w/ CGI SAPI causes echo of #!php at script start

[jimw]

ID: 8959
Updated by: jimw
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Bogus
Bug Type: PHP options/info functions
Assigned To: 
Comments:

bugs in the zend optimizer should be reported to zend.com.

Previous Comments:
---

[2001-01-27 18:32:11] [EMAIL PROTECTED]
I have compiled and installed PHP 4.0.4pl1 without problems, and we run it as an 
external binary from our Web server (SAPI CGI).  

However, when I install the current Zend Optimizer and add the appropriate lines to 
the php.ini file:

zend_optimizer.optimization_level=15
zend_extension="/usr/runtime/src/lib/ZendOptimizer.so"

it now spits out the first line of any script the server runs, i.e., for a script such 
as:

#!.php
";
?>

it will produce as HTML output:

#!.php
Hello, world.

I have checked to make sure that it's only these lines in the php.ini file -- when 
they are removed, it works fine.

Please note that I had already seen bug #8898 (where this problem occurred for 
-anyone- using the SAPI CGI) and made the diff suggested by that author, which fixed 
the problem when I wasn't using the optimizer.  I suspect that use of the optimizer is 
sending the CGI SAPI down a different path to a similar bug but I haven't been able to 
track it down.


---


Full Bug description available at: http://bugs.php.net/?id=8959


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8651 Updated: Linking with bundled Solaris libldap not supported

[sniper]

ID: 8651
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Status: Open
Old-Bug Type: *Install and Config
Bug Type: LDAP related
Assigned To: 
Comments:

reclassified

Previous Comments:
---

[2001-01-11 04:42:50] [EMAIL PROTECTED]
Presently the libldap bundled with Solaris 7 (package SUNWlldap) is
not correctly recognized. I suggest addind support for this.
Here is a workaround:
Enter in php-config: #define LDAP_API_VERSION 2004
Run configure --with-ldap 
make
Final linking will fail; repeat the  final failed command manually but add
-lldap

---


Full Bug description available at: http://bugs.php.net/?id=8651


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] phpweb karma reguest

[Zak Greant]

 Access denied: Insufficient Karma (zak|phpweb/manual)
Anyone care to grant me enough karma to work on the php website? :)

--zak





-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8961: Omited Math Function

[Frank]

From: [EMAIL PROTECTED]
Operating system: N/A
PHP version:  4.0 Latest CVS (27/01/2001)
PHP Bug Type: Math related
Bug description:  Omited Math Function

There are a set of four math function that convert real numbers to integers, trunc is 
missing.  Other functions of use are Frac, Mod, Div.

Round: return closest integer to argument, if fractional is .5 then return closest 
even integer.

Ceiling: return smallest integer greater than or equal to argument

Floor: return largest integer less than or equal to argument

Trunc: if argument is positive, return floor of argument, otherwise return ceiling of 
argument.

Frac: return abs(argument - trunc(argument))

Mod: returns remainder of the division of two arguments

Div: returns quotiant of the division of two arguments


(I ran into this problem when converting a decimal number to an IP number.)


-- 
Edit Bug report at: http://bugs.php.net/?id=8961&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8958 Updated: File uploads append Content-Type string

[mrobinso]

ID: 8958
Updated by: mrobinso
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Feedback
Bug Type: Unknown/Other Function
Assigned To: 
Comments:

Please provide a short snippet of code that
reproduces this effect. 

Previous Comments:
---

[2001-01-27 18:20:35] [EMAIL PROTECTED]

Doing file uploads with php 4.0.4pl1 on RH7 (RedHat RPMs) appends the Content-Type: 
/x  line to the top of the files.

-- Medvitz



---


Full Bug description available at: http://bugs.php.net/?id=8958


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8961 Updated: Omited Math Function

[rasmus]

ID: 8961
Updated by: rasmus
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Analyzed
Bug Type: Math related
Assigned To: 
Comments:

Not sure what you are asking for here.
round() exists
Modulus exists with the modulus operator.  ie. echo 3%2;
ceil() exists
floor() exists
Division obviously exists
Trunc sort of exists: echo (int)10.57;
Frac can be derived as well.  But I suppose that is the one you are asking for a 
native function for?

Previous Comments:
---

[2001-01-27 20:46:50] [EMAIL PROTECTED]
There are a set of four math function that convert real numbers to integers, trunc is 
missing.  Other functions of use are Frac, Mod, Div.

Round: return closest integer to argument, if fractional is .5 then return closest 
even integer.

Ceiling: return smallest integer greater than or equal to argument

Floor: return largest integer less than or equal to argument

Trunc: if argument is positive, return floor of argument, otherwise return ceiling of 
argument.

Frac: return abs(argument - trunc(argument))

Mod: returns remainder of the division of two arguments

Div: returns quotiant of the division of two arguments


(I ran into this problem when converting a decimal number to an IP number.)

---


Full Bug description available at: http://bugs.php.net/?id=8961


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] CVS Account Request

[anonymous]

Full name: Harald Radi
Email: [EMAIL PROTECTED]
ID: phanto
Purpose: win32 com and dotnet improvements

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8815 Updated: allow_fopen_url = On & include("URL") don't work

[sniper]

ID: 8815
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Feedback
Bug Type: *Configuration Issues
Assigned To: 
Comments:

Does this simple example work for you:

http://www.php.net"); ?>

If so, you are propably doing something wrong or have misunderstood
the use of include()

--Jani

Previous Comments:
---

[2001-01-19 21:39:57] [EMAIL PROTECTED]
After compiling PHP 4.0.4pl1 with 

./configure" 
--prefix=/usr 
--with-config-file-path=/usr/lib" 
--with-apache=../apache_1.3.14 
--with-mysql=/usr/local/mysql 
--with-pgsql=/usr/local/pgsql 
--with-gd 
--with-jpeg-dir 
--with-t1lib 
--with-ttf 
--with-mhash 
--with-openssl=/usr/local/ssl 
--with-curl 
--with-imap=../imap-2000a 
--with-mm 
--with-zlib 
--with-bz2 
--enable-gd-imgstrttf 
--enable-track-vars 
--enable-magic-quotes 
--enable-trans-sid 
--enable-sockets 
--enable-ftp 
--enable-bcmath 
--enable-calendar 
--with-gnu-ld

and then making and installing into Apache_1.3.14, and running it, when tring to 
include("URL"); or include("localpath?test=test"); it will give the result of "Error 
No Data Sent".

also

when in docs/test/ and tring to include a file like this. 
include("../test2/test/php"); it will fail and cannot find the file.

in the configuration (php.ini) there is a allow_url_fopen = On. and in phpinfo it says 
allow_url_fopen local value of '1' and a master value of '1'. This is a stock php.ini 
(except the error_log was set to a file and the requirted changes for 'imp/horde'. 
Other than that it is the stock config.

the system is Glibc 2.1.3, Linux Kernel 2.4.

any help with this is greatly appriciated.

thanks

---


Full Bug description available at: http://bugs.php.net/?id=8815


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #7575 Updated: php stops working correctly !

[sniper]

ID: 7575
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Feedback
Status: Open
Bug Type: OCI8 related
Assigned To: 
Comments:

User feedback:


Yes this is stile a problem in 4.0.4 !




Previous Comments:
---

[2001-01-07 19:41:04] [EMAIL PROTECTED]
Does this happen with PHP 4.0.4 ?

--Jani

---

[2000-11-01 17:07:49] [EMAIL PROTECTED]
php4 running as a module in IIS 5.0
Oracle 8.0.5 installed and tns-listener is started.
OCI8 extension include.
For some time simple php scripts with oci-calls works, but suttenly it stops working. 
I am not able to stop the "WWW Publishing Service" it hangs !
php-scripts downt get the parameters from the browser.
I have to reboot the system, witch i only do once a month normaly.
After removal of OCI8 extension, i have no problem.
The Oracle database do not have any problems during these insidenses.
Hope anyone cane solve this problem with OCI8 !
Good luck
Jesper Sivertsen

---


Full Bug description available at: http://bugs.php.net/?id=7575


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8809 Updated: Cookieless session with Header redirects

[sniper]

ID: 8809
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Status: Open
Old-Bug Type: Scripting Engine problem
Bug Type: Feature/Change Request
Assigned To: 
Comments:



Previous Comments:
---

[2001-01-19 14:44:53] [EMAIL PROTECTED]
I have code like:

session_start();
if ( !isset( $Foo ) )
{
session_register( "Foo" );
}
else
{
 print( $Foo );
}

Header( "Location: /index.php" );

This does not work with cookieless sessions because the session information is not 
added to the header() if it's a redirect. 

The header() should add the PHPSESSIONID variable to the redirection path if it 
contains "Location: " like it does with other URLS and forms.





---


Full Bug description available at: http://bugs.php.net/?id=8809


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] Proper IP

[Anil Madhavapeddy]

Quoting Graeme Canivet <[EMAIL PROTECTED]>:

> Okay, an update to my caching proxy server problem:
> 
> It seems that I get the proper true ip, when using https://, 
> and the caching servers ip when I use http:// 
> 
> Still, does anyone have any info on this problem?
> 

I don't see what the problem is ... you said yourself that there's a caching 
proxy server in the way.  When you try to access your site via http, it goes 
via the web-cache, and so your origin server sees the cache's IP address.  
https should never be cached, and it isn't going through the webcache, and so 
you get your client IP address appearing to the origin server.

All of which is fairly irrelevant to PHP.  Take a look at some good web-cache 
resources (google should help you, or www.netapp.com/tech_library)

-- 
Anil Madhavapeddy, <[EMAIL PROTECTED]>

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8913 Updated: undefined symbol SQLParamData

[sniper]

ID: 8913
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Closed
Bug Type: Apache related
Assigned To: 
Comments:

Broken db2 install -> closed.

Previous Comments:
---

[2001-01-27 03:06:27] [EMAIL PROTECTED]
I finally managed to figure out the problem I was having.  I went into my
/usr/IBMdb2/V7.1/lib directory and verified that libdb2.so existed.  It was there,
but it was called libdb2.so.1.

I created a symbolic link from libdb2.so -> libdb2.so.1 in that directory, and then
re-compiled PHP.  apache now loads and everything looks good.   When I do an 'ldd' on 
the libphp4.so, I now get:

libdb2.so.1 => /usr/IBMdb2/V7.1/lib/libdb2.so.1
libdl.so.2 => /lib/libdl.so.2
libresolv.so.2 => /lib/libresolv.so.2
libm.so.6 => /lib/libm.so.6
libcrypt.so.1 => /lib/libcrypt.so.1
libnsl.so.1 => /lib/libnsl.so.1
libc.so.6 => /lib/libc.so.6
libpthread.so.0 => /lib/pthread.so.0
libstdc++-libc6.1-1.so.2 => /usr/lib/libstdc++-lib6.1-2.so.2
/lib/ld-linux.so.2 => /lib/ld-linux.so.2

I'm not sure if this is a bug in PHP, or was just related to my DB2 installation.  I'm 
using a Debian system, but DB2 is distributed as in .rpm format.  I just converted the 
.rpms to .tgz files and then installed it by hand.   








---

[2001-01-25 15:22:14] [EMAIL PROTECTED]
With regards to the SOLID part.  This has been delt with and corrected since about PHP 
4.0.3pl1.  It was basically an incorrect linking of libraries done by PHP to the weird 
SOLID libraries.  

I'm not totally familiar with the DB2 layout, but it sounds like you did not properly 
link in your libraries files.  Check your configure log, and double check that they do 
exist where configure says they do.

---

[2001-01-25 14:34:00] [EMAIL PROTECTED]
I compiled PHP 4.0.4p1 today, with the following options:

./configure --with-apxs=/opt/apache/bin/apxs
--with-ibm-db2=/usr/IBMdb2/V7.1

It compiles fine, but when I try and load Apache it fails
with this error:

Cannot load /opt/apache/libexec/libphp4.so into server:
/opt/apache/libexec/libphp4.so: undefined symbol: SQLParamData

When I do an 'ldd' on it, I get the following:

libdb2.so.2 => /usr/lib/libdb2.so.2
libdl.so.2 => /usr/libdl.so.2
libresolv.so.2 => /lib/libresolv.so.2
libm.so.6 => /lib/libm.so.6
libcrypt.so.1 => /lib/libcrypt.so.1
libnsl.so.1 => /lib/libnsl.so.1
libc.so.6 => /lib/libc.so.6
/lib/ld-linux.so.2 => /lib/ld-linux.so.2

I'm not sure what the problem is.  When I tried to
investigate this error, I found some information about this
coming up when compiling PHP with something called 'Solid'.

My system is as follows:

Debian GNU/Linux 2.2
Kernel v2.4.0

apache: v1.3.14
php: v4.0.4p1
gcc: v2.95.3







---


Full Bug description available at: http://bugs.php.net/?id=8913


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8951 Updated: php_mysql_do_connect -> parameter host modified when using port or socket

[sniper]

ID: 8951
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Feedback
Bug Type: MySQL related
Assigned To: 
Comments:

Could you please try the latest snapshot from http://snaps.php.net/
to check if this is fixed already?

--Jani

Previous Comments:
---

[2001-01-27 12:46:46] [EMAIL PROTECTED]
Parameter $host is modified in function php_mysql_do_connect(). Example:

$host = "localhost:/tmp/mysql.sock";
$conn = mysql_connect($host .
echo $host;

Output is: localhost/tmp/mysql.sock 
because of replacing of ":" charcter by null char in
this part of php_mysql_do_connect

===

static void php_mysql_do_connect(INTERNAL_FUNCTION_PARAMETERS,int persistent)
{   
char *user,*passwd,*host,*socket=NULL,*tmp;
char *hashed_details;
int hashed_details_length,port = MYSQL_PORT;

/* We cannot use mysql_port anymore in windows, need to use
 * mysql_real_connect() to set the port.
 */

 if (host && (tmp=strchr(host,':'))) {
*tmp=0;
tmp++;
if (tmp[0] != '/') {
port = atoi(tmp);
} else {
socket = tmp;
}
.
}

===


solution:
copying of *host content through *host2 pointer

===


static void php_mysql_do_connect(INTERNAL_FUNCTION_PARAMETERS,int persistent)
{   
char *user,*passwd,*host,*socket=NULL,*tmp,*host2;
char *hashed_details;
int hashed_details_length,port = MYSQL_PORT;

/* We cannot use mysql_port anymore in windows, need to use
 * mysql_real_connect() to set the port.
 */

host2 = (char *) emalloc(strlen(SAFE_STRING(host) + 1));
strcpy(host2, host);
host = host2;

 if (host && (tmp=strchr(host,':'))) {
*tmp=0;
tmp++;
if (tmp[0] != '/') {
port = atoi(tmp);
} else {
socket = tmp;
}
...
}

---


Full Bug description available at: http://bugs.php.net/?id=8951


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] Leads>?

[leadsleadsmoreleads890]

BUY LEADS WHOLESALE FROM US FOR YOUR BUSINESS

http://www.geocities.com/leadoffers1900/leads.htm

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8955 Updated: Libs loaded in wrong order: -lcrypto -lssl

[sniper]

ID: 8955
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Closed
Bug Type: *Install and Config
Assigned To: 
Comments:

This should be fixed in CVS already. Please try latest CVS snapshot from
http://snaps.php.net/

--Jani

Previous Comments:
---

[2001-01-27 17:40:07] [EMAIL PROTECTED]
When one tries to configure php with openssl, the
libraries are loaded in the wrong order.  The problem
is that AC_ADD_LIBRARY in configure.in uses a
first-in last-out mechanism.  Swap the order to fix.

Change:
AC_ADD_LIBRARY(ssl)
AC_ADD_LIBRARY(crypto)
To:
AC_ADD_LIBRARY(crypto)
AC_ADD_LIBRARY(ssl)



---


Full Bug description available at: http://bugs.php.net/?id=8955


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8957 Updated: Please use --prefix to find things

[sniper]

ID: 8957
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Closed
Bug Type: *Install and Config
Assigned To: 
Comments:

Many systems have different libraries installed in different
locations. So using --prefix would not be a good solution.

Just create a install script in which you can use some $PREFIX variable
or something like that.

--prefix is usually used to indicate the prefix of the path where 'make install'
should copy libs/binaries/header files.

--Jani


Previous Comments:
---

[2001-01-27 17:49:01] [EMAIL PROTECTED]
A suggestion:

Please use --prefix when looking for things.

I ran configure with many arguments like:
--with-mm=/my/prefix/directory
when the directory would not have been needed if either
the --prefix was tried first, or if it used the
CPPFLAGS and LDFLAGS and LIBS to find things.



---


Full Bug description available at: http://bugs.php.net/?id=8957


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] E Bay is going up again..

[tabathia]

Selling on eBay is getting a little more expensive...the more 

you sell the more profit they make!

Are you tired of eBay and their price hikes?

Looking for an alternative?

Then we have just what you are looking for at a fraction of the cost!

Our Motto, The More YOU sell the more Profit YOU make...

For more complete details about this incredible offer, please respond to:

   [EMAIL PROTECTED]
 
With the words "more info" in the subject line.


Thank You

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #8962: (8212) If the result of an exec() command is one character the result is empty.

[bram]

From: [EMAIL PROTECTED]
Operating system: N/A
PHP version:  4.0.4pl1
PHP Bug Type: Unknown/Other Function
Bug description:  (8212) If the result of an exec() command is one character the 
result is empty.

This is the solution to problem 8212
File:  ext/standard/exec.c
Function _Exec:

Contains:

RETVAL_STRINGL(buf,l?l+1:0,1);

However, it should contain:

RETVAL_STRINGL(buf,l?l+1:((isspace((int)buf[0]) || !buf[0])?0:1),1);

The problem lies in code previous which reads:
/* strip trailing spaces */
l = strlen(buf);
t = l;
while (l && isspace((int)buf[--l]));
if (l < t) buf[l + 1] = '\0';

Obviously if the return value ends with the last line being a single character that 
DOES NOT end with a \n, then strlen(buf) = 1 and the variable l ends up as 0.

The trim code leaves us in an ambiguous position after it is completed.  The problem 
is that it operates under the assumption that we end with a newline character.  This 
is not always the case.  I suppose this is the problem with trying to trim whitespace 
in one line of code!

The suggested codefix simply checks when l==0 if buf[0] was actually trimmable, if 
not, then we know we have to return exactly one character (instead of 0.)  I have 
tested my solution and it seems to work.

An alternate proposal would be to originally compute the trim in a more normal way:
while (l && isspace((int)buf[l-1])) l--;
But this affects more than one line of code.


-- 
Edit Bug report at: http://bugs.php.net/?id=8962&edit=1



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #8889: Memory is not being freed.

[Rasmus Lerdorf]

> PS. Hey, guys from the php-dev. Don't you have anything
> to say ? Please do that !

Please do what?

You should try to figure out what is leaking memory on you.  None of my
servers are leaking.

-Rasmus


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]