From: administrator dot bau at josephinum dot at
Operating system: Windows 2003 SP2
PHP version: 5.2.4
PHP Bug Type: Filesystem function related
Bug description: file_exists don't work Correctly with NTLM and User with
Lower Rights
Description:
------------
Windows 2003 SP2 / IIS 6.0 / PHP 5.2.4
Anonymous Auth OFF
Basic Auth,NTLM Auth ON
With a Higher Right User(Admin) file_exsists Work Correctly, but with a
Lower Right User file_exists Return False but the HTML File get Included.
So it the File must be Checkable if Exists
I tripplecheck since 4 Days the Security Settings, also trying to figure
it out with NT Filemon for Accses Denieds
Find this Error(Is it a Bug?) by try to Securing :-) an Typo3 Website with
NTLM and SSL for Internal Authentification
This Error Stops Typo3 from loading External Files, because of @is_File =
False
Reproduce code:
---------------
<?php
$file='fileadmin/template/main.html';
clearstatcache();
if (@is_File("".$file)) {
echo ('File Exists:'.$file);
}else{
echo('File ERROR:'.$file);
}
include_once($file);
echo('Loaded');
?>
Expected result:
----------------
File Exists:fileadmin/template/main.html
<The HTML Code>
Loaded
Actual result:
--------------
File Error:fileadmin/template/main.html
<The HTML Code>
Loaded
--
Edit bug report at http://bugs.php.net/?id=42912&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=42912&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=42912&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=42912&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=42912&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=42912&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=42912&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=42912&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=42912&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=42912&r=support
Expected behavior: http://bugs.php.net/fix.php?id=42912&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=42912&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=42912&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=42912&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=42912&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=42912&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=42912&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=42912&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=42912&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=42912&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=42912&r=mysqlcfg
