ID: 28227 User updated by: lukem at NetBSD dot org Reported By: lukem at NetBSD dot org Status: Assigned Bug Type: CGI related Operating System: NetBSD 2.0C PHP Version: 4.3.6 Assigned To: shane New Comment:
This bug is still present in 4.3.10 as well. Note that NetBSD's pkgsrc system has been using the patch I provided for a few months now, and we haven't received any reports of problems with PHP with that patch when running as a: * php.so module under Apache * php CGI under Apache * php CGI under web servers that don't support the non-standard SCRIPT_FILENAME Please consider applying this patch, because without it PHP is useless as a CGI except under Apache & IIS. Previous Comments: ------------------------------------------------------------------------ [2004-12-13 20:33:52] jbardin at hsc dot usf dot edu Problem still exists in PHP-5.0.2 on SunOS ------------------------------------------------------------------------ [2004-08-19 08:17:23] keith at ksmith dot com 4.3.1 does not suffer this. It was introduced at or prior to 4.3.4 ------------------------------------------------------------------------ [2004-05-03 19:47:16] shane at caraveo dot com The current code does not rely on script_filename, script_filename is only used as a shortcut if it is available. Otherwise, the init function tries to determine the real script path, IF the fix_pathinfo ini setting is on. The current code was only tested under apache and iis. That said, the patch looks ok, and very likely improves the situation, but needs some good testing on apache/mod_php, apache/cgi, iis/isapi and iis/cgi, with various changes of configuration in php.ini (discard path, fix pathinfo, etc.). Unfortunately I have zero time. -Shane ------------------------------------------------------------------------ [2004-05-03 11:59:41] [EMAIL PROTECTED] Shane, can you please take a look when you have a moment? ------------------------------------------------------------------------ [2004-05-03 04:25:48] lukem at NetBSD dot org Here's the patch: http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/pkgsrc/www/php4/patches/patch-aa?rev=1.10&content-type=text/plain ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28227 -- Edit this bug report at http://bugs.php.net/?id=28227&edit=1
