ID: 47296 Comment by: inno dot vation at gmx dot net Reported By: ali dot hamad at dci dot net dot sa Status: No Feedback Bug Type: Apache2 related Operating System: Red Hat Enterprise Linux PHP Version: 5.2.8 New Comment:
Seeing the same problem under 5.2.6 (opensuse 10.3 newest patches) 1)global -> works php.ini: disable_functions= php_uname 2) vhost -> works not php.ini: disable_functions= vhost.conf: php_admin_value disable_functions "php_uname" ---- If I proof the variants - both shows me a "disable_functions=php_uname" relating to the code from Ali Hamad, but only in the variant 1) it returns an warning. I suppose that still a bug. Regards Inno Previous Comments: ------------------------------------------------------------------------ [2009-02-12 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". ------------------------------------------------------------------------ [2009-02-05 04:20:20] ali dot hamad at dci dot net dot sa Thank you, I will try this later this weekend and will let you know. Ali, ------------------------------------------------------------------------ [2009-02-04 22:19:55] [email protected] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://windows.php.net/snapshots/ ------------------------------------------------------------------------ [2009-02-04 03:28:35] ali dot hamad at dci dot net dot sa Description: ------------ 1) my disable_functions in php.ini : disable_functions = php_uname 2) in httpd.conf , inside the vhost for the user, I have : <Directory "/home/userName/public_html/"> <IfModule mod_php5.c> php_admin_value disable_functions "system" </IfModule> </Directory> 3) Here is my code : <?php echo "disable_functions=".ini_get('disable_functions'); echo "<br>"; echo "php_uname=".php_uname(); echo "<br>"; ?> 4) expected result : disable_functions=system php_uname= Linux ...etc. 5) Actual result : disable_functions=system php_uname= notice, no output from php_uname and in the php error log : [04-Feb-2009 06:08:28] PHP Warning: php_uname() has been disabled for security reasons in ..etc I think it is a bug since the ini_get call to disable_functions gave me what supposed to be disabled, system function. However, php_uname, is still disabled even if I overwrite disable_functions setting using the php_admin_value in the user vhost. Regards, Ali Hamad. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=47296&edit=1
