php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #15011 safe_mode_include_dir gives stupid results when configured in httpd.conf
Submitted: 2002-01-12 21:10 UTC Modified: 2002-02-05 16:30 UTC
Votes:1
Avg. Score:1.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: tapken at engter dot de Assigned:
Status: Closed Package: *Configuration Issues
PHP Version: 4.1.1 OS: Linux
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: tapken at engter dot de
New email:
PHP Version: OS:

 

 [2002-01-12 21:10 UTC] tapken at engter dot de
Hi!

I tried to insert these lines in httpd.conf:
php_admin_value safe_mode_include_dir "/document_root:/tmp"
php_admin_value include_path "/document_root:/tmp"

If i remove the ':/tmp' from safe_mode_include_dir everything is fine except that i cannot include files from /tmp. With ':/tmp' i can include *any* file from *any* directory apache can read.

But there is something wich is even more stupid:
If i only write
php_admin_value safe_mode_include_dir "/document_root"
and remove the include_path-line i can only include files with absolute file names.

If i define these settings in php.ini anything works fine.

Patches

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-01-12 21:27 UTC] tapken at engter dot de
Sorry, forget this stuff..... this was a mistake by me.

But: Why can't safe_mode_include_dir hanlde more than one directory like include_path?
 [2002-02-04 20:57 UTC] aaron dot hawley at uvm dot edu
can now:
http://cvs.php.net/co.php/php4/main/fopen_wrappers.h?sbt=1&r=1.32
 [2002-02-05 16:30 UTC] jflemer@php.net
This bug has been fixed in CVS.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Sep 07 23:01:27 2024 UTC