ID: 22001 Comment by: schlika at linuxmail dot org Reported By: mdff at a1 dot net Status: Closed Bug Type: Documentation problem Operating System: Solaris 8 PHP Version: 4.3.0 New Comment:
I have a php-4.3.3-dev compiled as CLI and it uses php-cli.ini if it finds it instead of php.ini Previous Comments: ------------------------------------------------------------------------ [2003-04-07 03:25:07] [EMAIL PROTECTED] This bug has been fixed in CVS. In case this was a PHP problem, snapshots of the sources are packaged every three hours; this change will be in the next snapshot. You can grab the snapshot at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites in short time. Thank you for the report, and for helping us make PHP better. ------------------------------------------------------------------------ [2003-04-07 02:56:36] [EMAIL PROTECTED] This behavior should really be documented... Why someone would stick the php.ini file in root is beyond me, but it should be at least noted. ------------------------------------------------------------------------ [2003-04-07 02:51:56] joseluis dot perez at arrakis dot es OS: Linux Debian 3.0, kernel 2.4.18. I canīt understand why you donīt plan to fix this 'feature'. Itīs an important security risk. Ok, letīs try to explain my plataform. I have an Apache that serves many virtualHosts. I use suexec to control that cgiīs are run in the jail where all virtualhost are. Each virtualhost has a different uid , and CGIīs are run with itīs own uid. This way I can restrict my customerīs security and privacy. And thatīs why itīs so important that PHP is run as CGI. I have compiled PHP with '--with-config-file-path=/etc' option. It worked correctly in the jail and I have a correct php.ini in '/etc'. In fact, PHP first look './php.ini' and then if it doesnīt exists, it reads /etc/php.ini. ( I used strace to see it ). I need PHP to run as a CGI, because I use it in Apache and I need it to generate HTML code, so I canīt compile it to work as CLI. I know that when you use -c option you can tell PHP where to look for php.ini, but when you run PHP in CGI mode, it overrides command line options. Itīs a security matter. I use PHPRC to tell PHP where to look for php.ini for each of my virtualhosts, but when exists a php.ini file in the directory where the scripts resides PHP read it and ignore PHPRC, -c or compilation options. Feel free to ask any further information you need, and of course thanks in avdvance. ------------------------------------------------------------------------ [2003-02-02 06:46:50] [EMAIL PROTECTED] Added a link to this bug report in the related existing bug of #21783 so this information will be added to the manual sometime. http://bugs.php.net/bug.php?id=21783 ------------------------------------------------------------------------ [2003-02-02 05:50:38] mdff at a1 dot net yes... i understand how this is done... now. but: i did not find anything 'bout this behaviour in the manual... maybe i overread it, but it should be placed to be seen at 1st (bold, underline ;-)) maybe in: http://www.php.net/manual/en/configuration.php#configuration.file thx, md. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/22001 -- Edit this bug report at http://bugs.php.net/?id=22001&edit=1
