php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #47296 php_admin_value does not work as expected
Submitted: 2009-02-04 03:28 UTC Modified: 2009-02-12 01:00 UTC
Votes:4
Avg. Score:5.0 ± 0.0
Reproduced:4 of 4 (100.0%)
Same Version:1 (25.0%)
Same OS:1 (25.0%)
From: ali dot hamad at dci dot net dot sa Assigned:
Status: No Feedback Package: Apache2 related
PHP Version: 5.2.8 OS: Red Hat Enterprise Linux
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: ali dot hamad at dci dot net dot sa
New email:
PHP Version: OS:

 

 [2009-02-04 03:28 UTC] ali dot hamad at dci dot net dot sa
Description:
------------
1) my disable_functions in php.ini :

disable_functions = php_uname

2) in httpd.conf , inside the vhost for the user, I have :

<Directory "/home/userName/public_html/">

<IfModule mod_php5.c>
    php_admin_value disable_functions "system"
</IfModule>

</Directory>

3) Here is my code :

<?php
echo "disable_functions=".ini_get('disable_functions');
echo "<br>";
echo "php_uname=".php_uname();
echo "<br>";
?>

4) expected result :
disable_functions=system
php_uname= Linux ...etc.

5) Actual result :
disable_functions=system
php_uname=

notice, no output from php_uname and in the php error log :
[04-Feb-2009 06:08:28] PHP Warning:  php_uname() has been disabled for security reasons in ..etc

I think it is a bug since the ini_get call to disable_functions gave me what supposed to be disabled, system function. However, php_uname, is still disabled even if I overwrite disable_functions setting using the php_admin_value in the user vhost.

Regards,
Ali Hamad.


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-02-04 22:19 UTC] jani@php.net
Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/


 [2009-02-05 04:20 UTC] ali dot hamad at dci dot net dot sa
Thank you, I will try this later this weekend and will let you know.

Ali,
 [2009-02-12 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2009-02-26 17:00 UTC] inno dot vation at gmx dot net
Seeing the same problem under 5.2.6 (opensuse 10.3 newest patches)

1)global -> works
php.ini:
disable_functions= php_uname

2) vhost -> works not
php.ini:
disable_functions=

vhost.conf:
php_admin_value disable_functions "php_uname" 


----

If I proof the variants - both shows me a 

"disable_functions=php_uname" relating to the code from Ali Hamad, but only in the variant 1) it returns an warning.

I suppose that still a bug.

Regards 

Inno
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Fri Dec 05 20:00:01 2025 UTC