php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #54239 disable_functions tightening like open_basedir
Submitted: 2011-03-13 05:33 UTC Modified: 2020-11-03 17:46 UTC
Votes:7
Avg. Score:4.3 ± 0.9
Reproduced:6 of 6 (100.0%)
Same Version:3 (50.0%)
Same OS:3 (50.0%)
From: naox at o2 dot pl Assigned:
Status: Suspended Package: PHP options/info functions
PHP Version: 5.3.6 OS:
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: naox at o2 dot pl
New email:
PHP Version: OS:

 

 [2011-03-13 05:33 UTC] naox at o2 dot pl 
Description:
------------
http://php.net/manual/en/ini.core.php

disable_functions is php.ini only

open_basedir is PHP_INI_ALL - because next change can only append to open_basedir 
path, never take something back. Disable_functions should work the same way! It 
should be PHP_INI_ALL and allowing adding functions, but never taking those back. 
This allong open_basedir and prepend could make handy to make privledge separation 
for multiple sites but wihtout multiple php.ini

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-04-26 00:30 UTC] naox at o2 dot pl
-Summary: disable_functions > PHP_INI_ALL +Summary: disable_functions tightening like open_basedir -Package: Safe Mode/open_basedir +Package: PHP options/info functions -PHP Version: 5.3.5 +PHP Version: 5.3.6
 [2011-04-26 00:30 UTC] naox at o2 dot pl 
allow disable_functions tightening like open_basedir :(
 [2011-04-26 05:38 UTC] fg345twrg at gmail dot com 
Making disable_functions INI_ALL and allowing it to set only if previously empty 
would be good start. Tightening would be perfect.
 [2013-08-03 15:55 UTC] ben dot rubson at gmail dot com 
See summary bug #65386
 [2020-11-03 17:46 UTC] cmb@php.net
-Status: Open +Status: Suspended
 [2020-11-03 17:46 UTC] cmb@php.net 
This feature requires discussion for which this bug tracker is
unsuitable.  If anybody is still interested in this, please
forward the request to the internals mailing list[1].  For the
time being, I'm suspending this ticket.

[1] <https://www.php.net/mailing-lists.php#internals>
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 23:01:29 2024 UTC