php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #70474 errors shown in wrong accounts
Submitted: 2015-09-11 10:16 UTC Modified: 2021-05-30 04:22 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: hajo dot locke at gmx dot de Assigned: cmb (profile)
Status: No Feedback Package: Safe Mode/open_basedir
PHP Version: 5.5.29 OS: Ubuntu 14.04.3 LTS
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2015-09-11 10:16 UTC] hajo dot locke at gmx dot de
Description:
------------
Hello,

we use PHP 5.5. as mod_php and open_basedir restrictions:
/srv/htdocs/account1/:/tmp:/usr/bin:/srv/htdocs/account1:/bin:/usr/local/bin:/usr/share/php:/dev/urandom
We host a lot of domains and most of domains use different homeaccounts.

Sometimes it happens that user in account1 create by .htaccess individual error_log and accidently use wrong paths outside open_basedir but inside other valid accounts:

php_flag log_errors on
php_value error_log /srv/htdocs/account2/path/writeable.log

Because its outside open_basedir the log is not used if errors occur on domains in account1. ("Unknown: open_basedir restriction in effect.....)
But also it happens that this errormessages shows up in arbitrary errorlogs of other accounts. May be account3 is using an errorlog and sees errors about open_basedir restriction for account1 caused by wrong paths in .htaccess of account1

Why is PHP doing this? I think errors of this kind may written in central error_log if defined, but not individual error_logs of users.
Is this configurable?




Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2021-05-20 15:46 UTC] cmb@php.net
-Status: Open +Status: Feedback -Assigned To: +Assigned To: cmb
 [2021-05-20 15:46 UTC] cmb@php.net
Is this still an issue with any of the actively supported PHP
versions[1]?  Is OPcache enabled?  If so, shared memory cache or
file cache only?

[1] <https://www.php.net/supported-versions.php>
 [2021-05-30 04:22 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Mar 29 07:01:28 2024 UTC