php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #7973 Safe Mode absolute path behaviour changed
Submitted: 2000-11-25 17:06 UTC Modified: 2002-01-02 13:51 UTC
From: james at mcglinn dot org Assigned:
Status: Closed Package: Scripting Engine problem
PHP Version: 4.0.3pl1 OS: Red Hat Linux 5.2
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: james at mcglinn dot org
New email:
PHP Version: OS:

 

 [2000-11-25 17:06 UTC] james at mcglinn dot org 
Under PHP 4.0.1pl2 running in Safe Mode with the php_doc_root admin flag set to the user's home directory, a require()'d or include()'d (or auto_prepended) file could be specified as '/html/path/to/file', which would be evaluated as php_doc_root/html/path/to/file.

After upgrading to PHP 4.0.3pl1 this is no longer working, and all files appear to require their absolute paths to be used, ie $DOCUMENT_ROOT . "/path/to/file".

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-12-12 06:29 UTC] yohgaki@php.net 
Nobody has touched this bug report for a long time.
Is this still a issue?

To reporter: Could you try 4.1.0 see if there is problem?
 [2001-12-12 08:41 UTC] yohgaki@php.net 
Status = Feedback
 [2002-01-02 13:51 UTC] lobbin@php.net 
No feedback. Closing.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed May 07 09:01:27 2025 UTC