php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #65646 re-enable CURLOPT_FOLLOWLOCATION with open_basedir or safe_mode
Submitted: 2013-09-09 21:27 UTC Modified: 2013-09-10 18:45 UTC
From: butesa at freenet dot de Assigned: aharvey
Status: Closed Package: cURL related
PHP Version: 5.5.3 OS: any
Private report: No CVE-ID:
 [2013-09-09 21:27 UTC] butesa at freenet dot de
Description:
------------
CURLOPT_FOLLOWLOCATION is disabled when open_basedir is set or when safe_mode is on.
Since 7.19.4, curl won't follow a location-header that uses the file-protocol. So using CURLOPT_FOLLOWLOCATION in combination with open_basedir or safe_mode should be fine.
("Since 7.19.4, libcurl can limit what protocols it will automatically follow. The accepted protocols are set with CURLOPT_REDIR_PROTOCOLS and it excludes the FILE protocol by default." http://curl.haxx.se/libcurl/c/curl_easy_setopt.html#CURLOPTFOLLOWLOCATION )


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-09-10 06:26 UTC] aharvey@php.net
-Status: Open +Status: Assigned -Assigned To: +Assigned To: aharvey
 [2013-09-10 06:26 UTC] aharvey@php.net
I have an implementation of this on a branch in my GitHub fork, but don't have time to finish testing it tonight. I'll try to get back to it later in the week.
 [2013-09-10 07:08 UTC] sudanisayfree at gmail dot com
I use Nimbuzz! Developers Program in there website :

( http://developer.nimbuzz.com/page.php?page=manual )

     To make the program work by downloading this folder : 

http://developer.nimbuzz.com/tools/docs/hello-world.rar
there you should Extract this codebase and add the
folder 'hello-world' in the document
root of your server.
So if your hosting is
www.myhosting.com, try opening
http://www.myhosting.com/hello-
world/api.php, you should see the
page return an xml response.
This is the Callback URL for your
chat buddy. Please provide us with
this callback URL on
developers.nimbuzz.com or mail us
at developers.nimbuzz.com

then you must Make config changes. Replace
'test123' with TESTJID provided by
us in file configuration.php.

Add your chat buddy to your roster
using TESTJID provided by us. Use
'bot TESTJID' to add chat buddy to
your roster on PC/MAC client.
 [2013-09-10 18:45 UTC] aharvey@php.net
-Status: Assigned +Status: Closed
 [2013-09-10 18:45 UTC] aharvey@php.net
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

Implemented on master:
https://github.com/php/php-src/commit/fba290c061027c24e4c8effdba37addd3430c3d4
 
PHP Copyright © 2001-2017 The PHP Group
All rights reserved.
Last updated: Sun Feb 26 16:01:37 2017 UTC