On 7/13/10 11:53 PM, Reindl Harald wrote:
> Sorry but if the same webserver binary is running php5 with the same vhosts
> on the same machine and only one php-version does funny things why
> does anybody start a foolish discussion where the problem is?
Could you please drop it. That bug was found
Am 14.07.2010 06:13, schrieb Pas:
> First of all, excuse me to say, but your English is horrible
Maybe but does not matter
> I'm also questioning your reading comprehension
I'm yours too
> Second of all, when you are using mod_php, then every server process
> uses the same configuration
Tell
Hello,
On 2010.07.13. 15:24, Reindl Harald wrote:
- php6 is dead as of now
This was not so as i wrote the bugreport and is not related
RTFM is the wrong answer to a bug, every time, every where
- open_basedir is not per directory, except if the new setting is more
- restrictive that the sys
Folks,
quick heads up: 5.2.14RC3 and 5.3.3RC3 will be packaged some time
between Wed evening and Thur morning my time (CEST) this week. After
that please send notices (to this list or me via IRC/IM/private
mail/...) before committing and test the RCs carefully and send feedback
as we'd like to rol
On 13 July 2010 23:12, Ferenc Kovacs wrote:
> http://bugs.php.net/50255
>
> jani tends to close bugs without much reading.
Honestly, Jani's... uh, unique approach was a large part of why I've
tried to get a little more involved in bug triage work in the last
year. The point is that there are actu
On Tue, Jul 13, 2010 at 5:12 PM, Ferenc Kovacs wrote:
>>
>> I would simply comment a non angry reply to explain why the bug was
>> valid. That's the way to go. I have no idea (nor I want to know) what
>> you discussed with Jani, but one thing is sure, 99% of the bugs we
>> process are doing with c
On Tue, Jul 13, 2010 at 11:12, Ferenc Kovacs wrote:
>
> btw: why can't we see the status changes in the Changes tab at the bugreports?
> it would be an interesting to check how many bugs were first marked as
> bogus then re-opened and fixed.
You can check here to see the email dispatched when
>
> I would simply comment a non angry reply to explain why the bug was
> valid. That's the way to go. I have no idea (nor I want to know) what
> you discussed with Jani, but one thing is sure, 99% of the bugs we
> process are doing with care and respect.
>
http://bugs.php.net/50255
jani tends to
2010/7/13 Vincenzo D'Amore :
> Thanks Johannes,
> you are really clear and I finally understand what's the problem.
> I'm following a big free web hosting service, I would like to enhance
> performance of customers webspache.
> What do you think if:
>
> set safe_mode off
> remove open_basedir
> dis
Thanks Johannes,
you are really clear and I finally understand what's the problem.
I'm following a big free web hosting service, I would like to enhance
performance of customers webspache.
What do you think if:
- set safe_mode off
- remove open_basedir
- disable_functions symlink, unlin
On Tue, 2010-07-13 at 15:11 +0200, Vincenzo D'Amore wrote:
> thank you for reading my posts, *could anybody help me to
> understand why realpath cache is disabled if safe_mode or open_basedir are
> set?*
For security reasons.
Assume the following (simplified) code:
and suddenly you've bypassed
> - php6 is dead as of now
This was not so as i wrote the bugreport and is not related
RTFM is the wrong answer to a bug, every time, every where
> - open_basedir is not per directory, except if the new setting is more
> - restrictive that the system one. As documented.
Again what will you try m
Hi,
thank you for reading my posts, *could anybody help me to
understand why realpath cache is disabled if safe_mode or open_basedir are
set?*
Or must I remove safe_mode and open_basedir setting at all?
Is there a document that describe a best practice to follow this way (for
example a list of PH
hi,
On Tue, Jul 13, 2010 at 2:52 PM, Reindl Harald wrote:
> Am 13.07.2010 14:29, schrieb Pierre Joye:
>> hi,
>>
>> On Tue, Jul 13, 2010 at 1:50 PM, Reindl Harald
>> wrote:
>>
>>> http://bugs.php.net/bug.php?id=42836
>>
>> The answer was clear
>
> WHAT is here clear?
> Someone is closing a bugre
Am 13.07.2010 14:29, schrieb Pierre Joye:
> hi,
>
> On Tue, Jul 13, 2010 at 1:50 PM, Reindl Harald wrote:
>
>> http://bugs.php.net/bug.php?id=42836
>
> The answer was clear
WHAT is here clear?
Someone is closing a bugreport without understanding the problem
> it is a default comment we use in
hi,
Please do not double posts both in the bug report and here. Or it will
be a pain to follow.
Cheers,
On Tue, Jul 13, 2010 at 11:08 AM, Vincenzo D'Amore wrote:
> Hello All,
>
> could anybody explain me why if safe_mode or open_basedir are set, realpath
> cache is disabled?
>
> Looking at sour
hi,
On Tue, Jul 13, 2010 at 1:50 PM, Reindl Harald wrote:
> http://bugs.php.net/bug.php?id=42836
The answer was clear, it is a default comment we use instead of RTFM.
bugs.php.net is not meant to be a support channel. We don't have the
time/resource to do so (while some of us do it from time to
Most of the time local exploits are not as bad as it seems. You can do
things in plain PHP witch will just hang the server, like make a
script that uses a ton of memory or opens a lot of files, does spam,
etc. It's a programming language, it's job to execute scripts (now
days a size of a good appli
Am 13.07.2010 13:40, schrieb Pierre Joye:
> Did you ever run PHP RCs and reported issues?
> Dong so will free us some time and helps to reduce
> the time to release.
I did, even with a automatic snaphsot-build-system on my homeserver
But after repeatly set bugreports as "bogus" and reopening
afte
hi Reindl,
On Tue, Jul 13, 2010 at 1:18 PM, Reindl Harald wrote:
> In the case of php it seems every user input it thrown away
> like i have seen in no other project before
Rasmus has been very kind and verbose in his explanations. None of us
was saying that things cannot be improved. For one,
On 13.07.2010, at 13:18, Reindl Harald wrote:
> In the case of php it seems every user input it thrown away
> like i have seen in no other project before
You have suggested that someone do something for you, yet you have chosen to
ignore suggestions how you could do the same thing yourself.
r
Am 13.07.2010 11:10, schrieb Patrick ALLAERT:
> 2010/7/12 Reindl Harald :
>> Jesus christ I AM THE ADMIN TOO and i have no time to
>> to the sysadminjob
>
> Congratulations, you just pinpointed the problem yourself.
What do you try me to say?
Other admins are not interested as i am in getting se
2010/7/12 Reindl Harald :
> Jesus christ I AM THE ADMIN TOO and i have no time to
> to the sysadminjob
Congratulations, you just pinpointed the problem yourself.
Patrick
--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
Hello All,
could anybody explain me why if safe_mode or open_basedir are set, realpath
cache is disabled?
Looking at source code main/main.c of 5.2.13 I can see:
1292: /* Disable realpath cache if safe_mode or open_basedir are set */
if (PG(safe_mode) || (PG(open_basedir) && *PG(open_basedir)))
24 matches
Mail list logo
