php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #65646 re-enable CURLOPT_FOLLOWLOCATION with open_basedir or safe_mode
Submitted: 2013-09-09 21:27 UTC Modified: 2013-09-10 18:45 UTC
From: butesa at freenet dot de Assigned: aharvey (profile)
Status: Closed Package: cURL related
PHP Version: 5.5.3 OS: any
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: butesa at freenet dot de
New email:
PHP Version: OS:

 

 [2013-09-09 21:27 UTC] butesa at freenet dot de 
Description:
------------
CURLOPT_FOLLOWLOCATION is disabled when open_basedir is set or when safe_mode is on.
Since 7.19.4, curl won't follow a location-header that uses the file-protocol. So using CURLOPT_FOLLOWLOCATION in combination with open_basedir or safe_mode should be fine.
("Since 7.19.4, libcurl can limit what protocols it will automatically follow. The accepted protocols are set with CURLOPT_REDIR_PROTOCOLS and it excludes the FILE protocol by default." http://curl.haxx.se/libcurl/c/curl_easy_setopt.html#CURLOPTFOLLOWLOCATION )

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-09-10 06:26 UTC] aharvey@php.net
-Status: Open +Status: Assigned -Assigned To: +Assigned To: aharvey
 [2013-09-10 06:26 UTC] aharvey@php.net 
I have an implementation of this on a branch in my GitHub fork, but don't have time to finish testing it tonight. I'll try to get back to it later in the week.
 [2013-09-10 07:08 UTC] sudanisayfree at gmail dot com 
I use Nimbuzz! Developers Program in there website :

( http://developer.nimbuzz.com/page.php?page=manual )

     To make the program work by downloading this folder : 

http://developer.nimbuzz.com/tools/docs/hello-world.rar
there you should Extract this codebase and add the
folder 'hello-world' in the document
root of your server.
So if your hosting is
www.myhosting.com, try opening
http://www.myhosting.com/hello-
world/api.php, you should see the
page return an xml response.
This is the Callback URL for your
chat buddy. Please provide us with
this callback URL on
developers.nimbuzz.com or mail us
at developers.nimbuzz.com

then you must Make config changes. Replace
'test123' with TESTJID provided by
us in file configuration.php.

Add your chat buddy to your roster
using TESTJID provided by us. Use
'bot TESTJID' to add chat buddy to
your roster on PC/MAC client.
 [2013-09-10 18:45 UTC] aharvey@php.net
-Status: Assigned +Status: Closed
 [2013-09-10 18:45 UTC] aharvey@php.net 
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

Implemented on master:
https://github.com/php/php-src/commit/fba290c061027c24e4c8effdba37addd3430c3d4
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue Oct 28 11:00:01 2025 UTC