php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #64865 Search for .user.ini files from script dir up to CONTEXT_DOCUMENT_ROOT
Submitted: 2013-05-17 08:55 UTC Modified: 2020-10-19 09:26 UTC
Votes:4
Avg. Score:4.2 ± 0.8
Reproduced:3 of 3 (100.0%)
Same Version:0 (0.0%)
Same OS:2 (66.7%)
From: php-bugs at sievers dot dialup dot fu-berlin dot de Assigned:
Status: Re-Opened Package: CGI/CLI related
PHP Version: 5.5Git-2013-05-17 (Git) OS:
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: php-bugs at sievers dot dialup dot fu-berlin dot de
New email:
PHP Version: OS:

 

 [2013-05-17 08:55 UTC] php-bugs at sievers dot dialup dot fu-berlin dot de 
Description:
------------
Currently PHP-CGI searches for .user.ini files in the script directory and all parent directories up to DOCUMENT_ROOT.

See: http://php.net/manual/en/configuration.file.per-user.php

If Apache web servers use the UserDir module the php scripts lie out of the DOCUMENT_ROOT, which causes PHP-CGI to search only in the script directory for .user.ini files. This is inconvenient for users, who have to copy their .user.ini files to all sub-directories in order to apply their settings.

Since Apache 2.3.13 there is an additional CONTEXT_DOCUMENT_ROOT variable, which is set by mod_userdir and probably mod_alias accordingly.

See http://stackoverflow.com/questions/12129433/what-is-servercontext-prefix/12129649#12129649

PHP-CGI could use this variable (if set) to search for .user.ini files. It could search from the script directory up to CONTEXT_DOCUMENT_ROOT. If the variable is not set, PHP-CGI should use DOCUMENT_ROOT as it has before.

Even other web servers (e.g. Apache 2.2) can profit from this change, since it's easy to set CONTEXT_DOCUMENT_ROOT variable via a RewriteRule directive.

Apache http's suexec support the CONTEXT_DOCUMENT_ROOT variable too:

  *) suexec: Add environment variables CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX,
     REDIRECT_ERROR_NOTES, REDIRECT_SCRIPT_FILENAME, REQUEST_SCHEME to the
     whitelist in suexec. PR 51499. [Graham Laverty <graham reg ca>,
     Stefan Fritsch]

(http://mirror.serversupportforum.de/apache//httpd/CHANGES_2.4)

Jan Sievers

Patches

Pull Requests

Pull requests:

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2020-01-03 15:53 UTC] willypbender83 at gmail dot com 
The following pull request has been associated:

Patch Name: Use CONTEXT_DOCUMENT_ROOT for scanning dir tree
On GitHub:  https://github.com/php/php-src/pull/5051
Patch:      https://github.com/php/php-src/pull/5051.patch
 [2020-01-24 14:34 UTC] nikic@php.net 
Automatic comment on behalf of wbender@nmi.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=98bfad738ad2734dfba5733323f7ba733daf3ec3
Log: Fix bug #64865: Use CONTEXT_DOCUMENT_ROOT for scanning dir tree
 [2020-01-24 14:34 UTC] nikic@php.net
-Status: Open +Status: Closed
 [2020-02-20 15:14 UTC] iggyvolz at gmail dot com 
Is there any way this could be backported to 7.4?
 [2020-10-19 09:25 UTC] nikic@php.net 
Automatic comment on behalf of nikita.ppv@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c97da0f819730c00905f9618aba0c54e8d592f74
Log: Revert &quot;Fix bug #64865: Use CONTEXT_DOCUMENT_ROOT for scanning dir tree&quot;
 [2020-10-19 09:26 UTC] nikic@php.net
-Status: Closed +Status: Re-Opened
 [2020-10-19 09:26 UTC] nikic@php.net 
Re-opening as the change has been reverted due to bug #80113.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 15:01:30 2024 UTC