From: karasek at ceskyserver dot cz
Operating system: Linux 2.4.21
PHP version: 4.3.4
PHP Bug Type: Apache2 related
Bug description: bad include_path
Description:
------------
Hi, I saw this problem on 4.3.3, but I haven't see it in change-log of
4.3.4, so, I'm reporting it.
I have several virtualhosts. One of my virtual host have include_path
changed in .httacces.
Sometimes (not often) another virtualhost uses this include_path. The
frequency is about once per 100 requests...
I have just installed 4.3.4, so, I'll be watching my logs...
I'm using these modules of Apache:
Compiled in modules:
core.c
mod_access.c
mod_auth.c
mod_include.c
mod_log_config.c
mod_env.c
mod_setenvif.c
mod_ssl.c
prefork.c
http_core.c
mod_mime.c
mod_status.c
mod_autoindex.c
mod_asis.c
mod_suexec.c
mod_cgi.c
mod_negotiation.c
mod_dir.c
mod_imap.c
mod_actions.c
mod_alias.c
mod_so.c
If you think, I can help, contact me, please.
Regards
Antonin Karasek
Reproduce code:
---------------
include("directory/file.php");
Actual result:
--------------
[client x.x.x.x] PHP Warning: main(includes/bottom.php): failed to open
stream: Operation not permitted in /path/to/the/script.php on line 122,
referer: http://url.cz/legenda.php
[client x.x.x.x] PHP Warning: main(): Failed opening
'includes/bottom.php' for inclusion (include_path='of another virtualhost
from .htaccess') in /path/to/the/script.php on line 122, referer:
http://url.cz/legenda.php
--
Edit bug report at http://bugs.php.net/?id=27652&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=27652&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=27652&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=27652&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=27652&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=27652&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=27652&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=27652&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=27652&r=support
Expected behavior: http://bugs.php.net/fix.php?id=27652&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=27652&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=27652&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=27652&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=27652&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=27652&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=27652&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=27652&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=27652&r=float
