|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #74755 Host based open_basedir setting broke in 7.0.20 and 7.1.6
Submitted: 2017-06-13 19:03 UTC Modified: 2017-06-13 21:24 UTC
From: joshin at hotmail dot com Assigned:
Status: Duplicate Package: *Configuration Issues
PHP Version: 7.1.6 OS: Linux
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !
Your email address:
Solve the problem:
37 - 11 = ?
Subscribe to this entry?

 [2017-06-13 19:03 UTC] joshin at hotmail dot com
In previous versions of 7.0 & 7.1 I could use an ext file like the paste in the "test script" area to limit access to files by the HOST variable sent to PHP FPM.

With 7.0.20 and 7.1.6, the behavior changed. Now, the HOST setting appears to be ignored, and the last open_basedir variable labeled in the file ('s) gets set.

This results in errors for "" and "".

Test script:
[HOST =]
 open_basedir = /home/www/whphx16/
[HOST =]
 open_basedir = /home/www/whphx16/
[HOST =]
 open_basedir = /home/www/whphx16/

Expected result:
I expect each site to have a custom setting for open_basedir

Actual result:
All sites get the last entry's setting for open_basedir


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2017-06-13 21:13 UTC] spam2 at rhsoft dot net
no idea why you did file it for not related "PHP Version: 7.1.6 but the issue is known and already fixed ->;a=shortlog;h=refs/heads/PHP-7.1

PHP                                                                        NEWS
?? ??? 2017, PHP 7.1.7

- Core:
  . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
    parsed). (Manuel Mausz)
  . Fixed bug #74658 (Undefined constants in array properties result in broken
    properties). (Laruence)
  . Fixed misparsing of abstract unix domain socket names. (Sara)
 [2017-06-13 21:24 UTC]
-Status: Open +Status: Duplicate
 [2017-06-13 21:24 UTC]
Closing as duplicate of bug #74738.
PHP Copyright © 2001-2021 The PHP Group
All rights reserved.
Last updated: Mon Oct 25 11:03:35 2021 UTC