php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #17927 open_basedir is not working
Submitted: 2002-06-22 19:40 UTC Modified: 2002-10-19 23:00 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: matt at haught dot com Assigned:
Status: Closed Package: Apache2 related
PHP Version: 4.3.0 OS: FreeeBSD 4.7-RELEASE
Private report: No CVE-ID: None
View Developer Edit
 [2002-06-22 19:40 UTC] matt at haught dot com 
I am using the php_admin_value to set the open_basedir option within a <VirtualHost>, the option is accepted by apache-2.0.39 and is reflected by phpinfo().  I just moved my sites around and I forgot to change my open_basedir, and to my amazement i got no errors when opening any of the pages.  I also have open_basedir set to /usr/local/www/data as a default in my php.ini (mostly to remind me to set it for the virtual host's dir which is not in that dir).  I can change the values to anything in either the ini or through php_admin_value and no restrictions are put into place.  I put this bug into apache2 releated, but I am not sure if it is reflected in others.  I am using php4-200206211500 snap.

As a side note, php_admin_flag engine Off, also does nothing inside a <VirtualHost> or a <Location>, I am not sure if it is related.  php_value include_path /dir, DOES work properly.

--Matt

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-07-28 18:21 UTC] michael at moria dot de 
At first, I read in a couple places to use "php_value", which is wrong.  "php_admin_value" is correct, but PHP 4.2.2 fails to parse it correctly without this patch:

--- sapi/apache2filter/apache_config.c.orig     2002-07-28 23:58:24.000000000 +0200
+++ sapi/apache2filter/apache_config.c  2002-07-28 23:58:37.000000000 +0200
@@ -128,7 +128,7 @@
 {
        AP_INIT_TAKE2("php_value", php_apache_value_handler, NULL, OR_OPTIONS,
                   "PHP Value Modifier"),
-       AP_INIT_TAKE2("php_admin_value", php_apache_admin_value_handler, NULL, OR_NONE,
+       AP_INIT_TAKE2("php_admin_value", php_apache_admin_value_handler, NULL, OR_OPTIONS,
                   "PHP Value Modifier"),
    {NULL}
 };

It does not look like php_admin_flag is implemented for apache 2.
 [2002-09-29 22:52 UTC] iliaa@php.net 
Please try using this CVS snapshot:

  http://snaps.php.net/php4-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-latest.zip
 [2002-10-19 23:00 UTC] matt at haught dot com 
It is currently working with latest cvs.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue Oct 28 14:00:01 2025 UTC