ID:               19292
 Comment by:       mikeathome at xamo dot com
 Reported By:      tnowak at triger dot com dot pl
 Status:           Bogus
 Bug Type:         Apache related
 Operating System: linux
 PHP Version:      4.3.3RC4
 New Comment:

I've tried 4.3.4 and 4.3.2 and they both do this. It happens (as
mentioned here) when you have many virtual host entries with
open_basedir restrictions, and you hit a website without the
open_basedir restriction setting in the Apache conf. It seems to try to
restrict the virtual host and picks a random open_basedir path. It is
most definately a bug with PHP, I don't know why they haven't fixed
this yet. I can easily repeat the problem.


Previous Comments:
------------------------------------------------------------------------

[2003-10-04 00:53:10] [EMAIL PROTECTED]

See bug #25753 (placeholder for all these reports about leaking php ini
settings)



------------------------------------------------------------------------

[2003-05-23 10:14:23] [EMAIL PROTECTED]

In the other vhost, set open_basedir to none


------------------------------------------------------------------------

[2003-05-23 10:03:57] zen at heavengames dot com

Tried it with PHP4.3.2RC4.  Problem still persists:

[23-May-2003 11:00:05] PHP Warning:  Unknown(): open_basedir
restriction in effect.
File(/usr/www/heavend1/httpd/htdocs/zen/gallery/view_album.php) is not
within the allowed path(s):
(/usr/www/heavend1/httpd/htdocs/wildfire/:/usr/www/heavend1/httpd/.php/)
in Unknown on line 0
[23-May-2003 11:00:05] PHP Warning: 
Unknown(/usr/www/heavend1/httpd/htdocs/zen/gallery/view_album.php):
failed to open stream: Operation not permitted in Unknown on line 0
[23-May-2003 11:00:05] PHP Warning:  (null)(): Failed opening
'/usr/www/heavend1/httpd/htdocs/zen/gallery/view_album.php' for
inclusion (include_path='.:/usr/www/heavend1/php') in Unknown on line
0

---
httpd.conf configuration:
<Directory /usr/www/heavend1/httpd/htdocs/wildfire>
  php_admin_flag safe_mode On
  php_admin_value doc_root /usr/www/heavend1/httpd/htdocs/wildfire/
  php_admin_value open_basedir
/usr/www/heavend1/httpd/htdocs/wildfire/:/usr/www/heavend1/httpd/.php/
  php_admin_value error_log
/usr/www/heavend1/httpd/logs/wildfire/php_error
  php_flag display_errors On
  php_admin_flag register_globals Off
</Directory>

<Directory /usr/www/heavend1/httpd/htdocs/zen>
  php_admin_flag safe_mode Off
  php_admin_value doc_root /usr/www/heavend1/httpd/htdocs/zen
  php_admin_value error_log
/usr/www/heavend1/httpd/logs/zen/php_error_log
  php_flag display_errors Off
  php_admin_flag register_globals Off
</Directory>

------------------------------------------------------------------------

[2003-03-02 21:54:58] kaspars at fabrika dot lv

Please see bug http://bugs.php.net/bug.php?id=22480, as this seems to
be connected somewhat, but more critical (php source disclosure).

------------------------------------------------------------------------

[2003-02-23 16:39:30] [EMAIL PROTECTED]

[david at ols dot es] submitted some patches which supposedly
fix some of the issues, so please try the latest snapshot from today.




------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/19292

-- 
Edit this bug report at http://bugs.php.net/?id=19292&edit=1

Reply via email to