php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #15011 safe_mode_include_dir gives stupid results when configured in httpd.conf
Submitted: 2002-01-12 21:10 UTC Modified: 2002-02-05 16:30 UTC
Votes:1
Avg. Score:1.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: tapken at engter dot de Assigned:
Status: Closed Package: *Configuration Issues
PHP Version: 4.1.1 OS: Linux
Private report: No CVE-ID: None
 [2002-01-12 21:10 UTC] tapken at engter dot de
Hi!

I tried to insert these lines in httpd.conf:
php_admin_value safe_mode_include_dir "/document_root:/tmp"
php_admin_value include_path "/document_root:/tmp"

If i remove the ':/tmp' from safe_mode_include_dir everything is fine except that i cannot include files from /tmp. With ':/tmp' i can include *any* file from *any* directory apache can read.

But there is something wich is even more stupid:
If i only write
php_admin_value safe_mode_include_dir "/document_root"
and remove the include_path-line i can only include files with absolute file names.

If i define these settings in php.ini anything works fine.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-01-12 21:27 UTC] tapken at engter dot de
Sorry, forget this stuff..... this was a mistake by me.

But: Why can't safe_mode_include_dir hanlde more than one directory like include_path?
 [2002-02-04 20:57 UTC] aaron dot hawley at uvm dot edu
can now:
http://cvs.php.net/co.php/php4/main/fopen_wrappers.h?sbt=1&r=1.32
 [2002-02-05 16:30 UTC] jflemer@php.net
This bug has been fixed in CVS.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Mon Apr 22 15:01:30 2024 UTC