php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #37782 php.ini in CWD not parsed
Submitted: 2006-06-12 01:59 UTC Modified: 2006-06-18 11:51 UTC
Votes:3
Avg. Score:4.3 ± 0.9
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: lordi at msdi dot ca Assigned:
Status: Not a bug Package: Documentation problem
PHP Version: 5.1.4 OS: Windows 2003
Private report: No CVE-ID: None
View Developer Edit
 [2006-06-12 01:59 UTC] lordi at msdi dot ca 
Description:
------------
Based on this page:
http://ca.php.net/manual/en/configuration.php#ini.register-globals

a php.ini file located in the current directory should be parsed before a file located in c:\windows\php.ini

If I use the php-cli.exe to parse files from iis, the c:\windows\php.ini is parsed even if there is a php.ini file in the local directory of the called script...

I tested the directory with getcwd() and it showed the right path...

I ran sysinternals filemon and I confirmed the bug or at least the documentation problem...

Tracing the disk access, I saw php-cli.exe tried to access c:\php.ini but got a not found error
Then the process tried to access c:\windows\php.ini which succeeded, but without trying to load the php.ini file from the documentation as per the documentation...

This worked fine in php 5.03, I just upgraded/clean reinstalled today

It might be a big security risk for people relying on local php.ini files since it's another php.ini file that gets parsed

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-16 16:36 UTC] colder@php.net 
I can't reproduce it (php5.1.4 @ windowsXP)

Anyway, where did you find a php-cli.exe file ?
The CLI executable is only called php.exe in PHP5.
 [2006-06-16 16:49 UTC] nlopess@php.net 
php-cli.exe is available in PHP 4 only. I've tested with php 5.2 and everything is working correctly.
 [2006-06-18 10:33 UTC] lordi at msdi dot ca 
Sorry, it's a typo in my previous message...

I was talking about php-cgi.exe not php-cli.exe
 [2006-06-18 11:51 UTC] nlopess@php.net 
Ah, the CGI SAPI doesn't read the current dir, yes (security purpose). But it is described in the page you mention.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Nov 19 13:00:01 2025 UTC