php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37989 Enviroment variables not availabe on exec,mail,...
Submitted: 2006-07-02 17:13 UTC Modified: 2017-01-21 07:53 UTC
Votes:4
Avg. Score:4.8 ± 0.4
Reproduced:4 of 4 (100.0%)
Same Version:0 (0.0%)
Same OS:2 (50.0%)
From: david at ols dot es Assigned:
Status: Open Package: *General Issues
PHP Version: 4.4.2 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: david at ols dot es
New email:
PHP Version: OS:

 

 [2006-07-02 17:13 UTC] david at ols dot es 
Description:
------------
Apache Environment variables (DOCUMENT_ROOT, SERVER_NAME, etc ...) are visible via phpinfo() and getenv() but not inside programs called via exec() and also not available to the mailer when called via mail()

Reproduce code:
---------------
test.php:

<?php
passthrough('print_env');
?>

print_env:

#!/bin/sh
/usr/bin/printenv

Expected result:
----------------
the very same variables reported as "Apache Enviroment" when calling phpinfo()

Actual result:
--------------
just a few standard shell variables

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-07-02 18:28 UTC] david at ols dot es 
varibles set by putenv() are correctly set and visible inside programs called by exec(), passthrough(), ...

in the other hand also env vars set by SetEnv apache directive are also not available inside programs called via
exec(), passthrough(), ...
 [2006-07-02 18:29 UTC] david at ols dot es 
varibles set by putenv() are correctly set and visible inside programs called by exec(), passthrough(), ...

in the other hand also env vars set by SetEnv apache directive are also not available inside programs called via
exec(), passthrough(), ...
 [2006-07-02 20:36 UTC] tony2001@php.net 
This is how Apache works and apparently PHP cannot change it.
Not PHP problem.
 [2006-07-03 05:57 UTC] david at ols dot es 
If PHP can access that variables via getenv() it (should) mean that they are in the enviroment and should also be accesible to programs called by PHP, but they are not. This does not look like a apache issue, it's PHP who calls the external programs and who has the chance to set it's enviroment
 [2006-07-03 06:47 UTC] tony2001@php.net 
>If PHP can access that variables via getenv() it (should)
>mean that they are in the enviroment 

Nope. That means only that those "environment" variables are in Apache hash.
 [2006-07-03 07:42 UTC] david at ols dot es 
ok, but according to apache documentation apache setenv "Sets an environment variable, which is then passed on to CGI scripts and SSI pages" , it could be considered that those variables should also be in php enviroment, where in fact they appear to be (as they could be accesed with getenv) and that it should also be in the enviroment of programs called by php. From a strict point of view the enviroment of apache should be propagated to php and then also to programs called by php. Apache API has functions to initialize and set the enviroment but that functions are not called by the php module. In th other hand when php is run as cgi then that enviroment is correctly set which makes it more inconsistent with how it works when run as an apache module.

Maybe this could be trated as a feature request rather than an bug (and i could provide a patch for the apache php module which will correctly set the enviroment).

Anyway the documentation should be changed to state that the apache enviroment in not really in the real program enviroment and that is not available for programs called by php).
 [2015-12-08 12:49 UTC] david at ols dot es 
Related To: Bug #36341
 [2017-01-20 21:06 UTC] heiglandreas@php.net
-Status: Open +Status: Feedback -Package: Feature/Change Request +Package: *General Issues
 [2017-01-20 21:06 UTC] heiglandreas@php.net 
Is this still relevant?
 [2017-01-21 07:53 UTC] david at ols dot es
-Status: Feedback +Status: Open
 [2017-01-21 07:53 UTC] david at ols dot es 
yes, as an exmaple,  having the REMOTE_ADDR user ip address will be very helpful when calling mail so the mailer could check it against spamhaus/cbl , also having REQUEST_URI available could help tracking problems in an enviroment where one has control over the mailer but not over the customer php scripts, specially when the website has been compromised or infected by malware. Will be really useful to track and limit the damage caused in such situations.
 [2019-06-19 05:54 UTC] erik at coretech dot se 
You should be able to achieve this via proc_open():

Argument env:
An array with the environment variables for the command that will be run, or NULL to use the same environment as the current PHP process

I don't think it would be a great idea to enable this for exec() per default as it would change behaviour for existing scripts and possibly copying terminal variables and such which could break the scripts or introduce unwanted effects.

/Erik Lundin
 [2021-09-09 12:38 UTC] cmb@php.net 
Related To: Bug #36341
 [2023-09-05 10:13 UTC] arturostreicha at gmail dot com 
Here information is given by you is too great it is very help for me thank you for this. (https://github.com.php)(https://tellpizzahut.pro/)
 [2024-07-03 10:35 UTC] joshep269pawar at gmail dot com 
This post is very insightful and very informative. Thanks for sharing it. (https://github.com)(https://www.gm-socrates.com)
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 13:01:29 2024 UTC