[PHP-DEV] safe_mode and files permissions q?

[Vitaly N. Kravchenko]

Hi.
I have small question for you.

When I turn safe_mode On, The users script can't access files
with uid differ from uid of this script. It's good.
But, when script.php create any (for example .txt) file.txt,
file.txt have owner uid of user defined in httpd.conf (apache),
User from whom apache runs.

And user can't access this file.
Can I solve this problem by myself, or it's Engine trouble..?

Thank you.

--
Best regards, KVN.
 PHP4You   ()
 PEAR [ru] ()
  mailto:[EMAIL PROTECTED]

-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] CVS Account Request: allhibi

[allhibi]

Arabic PHP Manual 

-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] IIS Bugs???

[Brian McGarvie]

OK This is a followon from my Browser thread... on [EMAIL PROTECTED]; 
[EMAIL PROTECTED]

I have switched the application to run from Apache, and the Browsers that were having 
trouble now seem (I think - will be doing more testing later) to have dissapeared.

So, is there a problem with IIS or PHP or IIS with PHP?

[ http://www.the-local-guide.com :: http://www.mcgarvie.net ]

--
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] safe_mode and files permissions q?

[Chand]

On Wed, 10 Jul 2002 10:29:54 +0300
"Vitaly N. Kravchenko" <[EMAIL PROTECTED]> wrote:

> 
> Hi.
> I have small question for you.
> 
> When I turn safe_mode On, The users script can't access files
> with uid differ from uid of this script. It's good.
> But, when script.php create any (for example .txt) file.txt,
> file.txt have owner uid of user defined in httpd.conf (apache),
> User from whom apache runs.
> 
> And user can't access this file.
> Can I solve this problem by myself, or it's Engine trouble..?

Hi, no you can't really solve this by yourself. What you have to do so that people can 
create files with their own uid is what i had to do for php4U (php for Lycos Members) 
which is setting the setuid bit to +s and adding in the php code an effective uid 
change.
The drawbacks of this is that you have to use a cgi version of php. It's not THAT bad 
actually in terms of performance. We use it for roughly several hundreds thousands 
users (not all active) with only 6 boxes. I'm not saying they're not loaded but they 
do fine.

I don't think there is another way. If i'm wrong that would be good but I don't really 
see how it could be done otherwise cause i won't launch php as root :)

Later

-- 
Chand

Je recompile une version cvs unstable d'un client mail pour avoir les accents dans les 
sujets. Et alors ?
(c) Chand, 2002

Le Perl c'est vraiment à chier pour générer des objets javas sérialisés. Et c'est bien 
dommage.
Tuf (c), 2002

-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Patch for bug: #16637

[Edin Kadribasic]

>Attached is a patch which fixes the bug described here:
>
>  http://bugs.php.net/bug.php?id=16337
>
>Please check that last comment I posted there and
>comment this patch then.. :)

Expecting urlencoded username and password seems to be the right
thing to do.

Edin


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Wanted: Apple QA volunteer in California

[Marko Karppinen]

The PHP Group is looking for a volunteer to test the upcoming Mac OS X
releases of PHP at Apple's Compatibility Labs in Cupertino, California.

The task is to run through the PHP Installer and a test harness on a wide
variety of Mac OS X platforms.

The ideal candidate will have experience in testing Macintosh software
products. He or she will be rewarded with personal access to Apple's labs
for up to three visits per month. This is hence a perfect task for a Apple
ISV wishing to gain access to the testing facilities.

Email me if you're interested.

--mk



-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Re: cvs: php4(ZendEngine2) /win32 php4dllts.dsp

[Yasuo Ohgaki]

[EMAIL PROTECTED] wrote:
> On Wed, 10 Jul 2002, Yasuo Ohgaki wrote:
> 
> 
>>Hmm. This tag is only for some win32 files.
>>The name isn't sound good to me.
> 
> 
> This was brought up before, and it's only needed for some files due to 
> incompabilities with the ZE1 stuff.
> 
> Derick
>

I must have missed that thread and cannot find them with
quick search.

So we are supposed to use ZendEngine2 tag to support both
ZE1 and ZE2 if needed, right?

--
Yasuo Ohgaki


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] safe_mode and files permissions q?

[Stefan Esser]

Hi,

> And user can't access this file.
> Can I solve this problem by myself, or it's Engine trouble..?

If you really really need to create and access files from your script then
create a directory within your document root like "script-data"
set safe_mode_include_dir to this directory. This should eliminate
the problems.

ATTENTION: do not forget to tell apache via httpd.conf that 
script-data is NOT accessible from the outside.

Stefan 

-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] safe_mode and files permissions q?

[Chand]

On Wed, 10 Jul 2002 11:55:42 +0200
"Stefan Esser" <[EMAIL PROTECTED]> wrote:

> Hi,
> 
> > And user can't access this file.
> > Can I solve this problem by myself, or it's Engine trouble..?
> 
> If you really really need to create and access files from your script then
> create a directory within your document root like "script-data"
> set safe_mode_include_dir to this directory. This should eliminate
> the problems.
> 
> ATTENTION: do not forget to tell apache via httpd.conf that 
> script-data is NOT accessible from the outside.


yeah that's a solution but it doesn't work in case of mass hosting : can't update 
php.ini for each new user and have it carry 2 peta zillions safe_mode_include_dirs :)

but yeah for a few users, this is a working solution. Good thinking :)
I hope this helps ya out Vitaly.

Later. Take care..


-- 
Chand

Je recompile une version cvs unstable d'un client mail pour avoir les accents dans les 
sujets. Et alors ?
(c) Chand, 2002

Le Perl c'est vraiment à chier pour générer des objets javas sérialisés. Et c'est bien 
dommage.
Tuf (c), 2002

-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Apple developer program membership

[Marko Karppinen]

I'm making the following Apple Developer Connection resources available
to the members of the PHP development community:

  4x ADC Software Seed Key

 A software seed key gives you access, for 12 months, to pre-release
 software seeds made available by Apple.
  
  6x ADC Premier Hardware Discount

 An ADC hardware discount entitles you to a 10-20% discount on an
 Apple system (a laptop, an Xserve or a cpu + display set). The
 hardware is for development purposes only.

  8x Apple Developer Technical Support Incident

 Official developer support from Apple for any Mac OS -related
 development problem.


The protocol for claiming these resources is simple: email me which
resources you need, and why. I will most likely support projects that are:

 - 100% PHP-specific
 - 100% Mac OS X -specific
 - Open Source
 - Made by individuals rather than companies

An additional rule concerns the hardware discounts: I will require proof
of purchase from everyone who participates. The discounts are a scarce
resource, and I don't want to see them wasted.

Please also note that use of these resources is subject to the Apple
Developer Connection Program Terms and Conditions, which, in essence,
consitute an NDA between Apple and you.

And lastly, porting UNIX applications to Mac OS X doesn't, as a rule,
require any of these resources. If you need shell access to an OS X
box for development purposes, email me and I'll set one up.

--mk



-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] safe_mode and files permissions q?

[Stefan Esser]

> yeah that's a solution but it doesn't work in case of mass hosting : can't
update
> php.ini for each new user and have it carry 2 peta zillions
safe_mode_include_dirs :)

just a guess: safe_mode_exec_dir=./script-data

Stefan


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Another problem in extension development

[Venkat Raghavan]

Hi all. We're having one more problem in the extension we're developing
based on the Java extension (by Sam Ruby). 

A line in our test script reads thus: 

$temp = $test_obj->objProp; 

Here, we're trying to access a particular property of an object, which
was created using our extension. FYI, this object represents a component
in some component system. This causes a crash in that component system,
whereas if we leave out the assignment (to 'temp' variable) and just
have the statement accessing the property, there is no problem.
 
What we want to know is what actions occur in the PHP interpreter / our
extension during this assignment operation. Can anyone help?
 
Thanx in advance,
Venkat

[PHP-DEV] Response headers

[Cristi Dumitrescu]

Hi,

Is there any way to see the outgoing headers for a PHP document? I mean not
only the headers I add via header(), but also the headers added by default
by apache, such as Keep-Alive, Connection, Content etc.
I need to count them and compute a traffic report for each PHP served and so
far I've been able to do it fairly easy with the request headers, but as far
as I could see, there is no way to read the outgoing headers in PHP.
It would be really useful if someone would implement something like this in
PHP and I suppose it's not that hard, given the fact that there already is a
server_context->headers_out, at least for apache.
Additionally, no idea if this is a bug or not, php_info() reports only a
single response header (X-Powered-By) if called within a ob_start();
ob_end_*(); block.
Please include me on CC if you answer, as I am not subscribed to the list.

Thanks,
Cristi


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Response headers

[Rasmus Lerdorf]

Grab one of the recent CVS snapshots.  You will find an
apache_response_headers() function.

-Rasmus

On Wed, 10 Jul 2002, Cristi Dumitrescu wrote:

> Hi,
>
> Is there any way to see the outgoing headers for a PHP document? I mean not
> only the headers I add via header(), but also the headers added by default
> by apache, such as Keep-Alive, Connection, Content etc.
> I need to count them and compute a traffic report for each PHP served and so
> far I've been able to do it fairly easy with the request headers, but as far
> as I could see, there is no way to read the outgoing headers in PHP.
> It would be really useful if someone would implement something like this in
> PHP and I suppose it's not that hard, given the fact that there already is a
> server_context->headers_out, at least for apache.
> Additionally, no idea if this is a bug or not, php_info() reports only a
> single response header (X-Powered-By) if called within a ob_start();
> ob_end_*(); block.
> Please include me on CC if you answer, as I am not subscribed to the list.
>
> Thanks,
> Cristi
>
>
> --
> PHP Development Mailing List 
> To unsubscribe, visit: http://www.php.net/unsub.php
>


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Going on vacation

[Andi Gutmans]

Hey,

I'm going on a four day computer-less vacation starting tomorrow morning so 
I won't be reading my Email.
If you guys send patches for the Engine 2 or other queries please give me 
some time to reply when I get back. I'll look them over ASAP.

Thanks,
Andi


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Re: cvs: php4(ZendEngine2) /win32 php4dllts.dsp

[Andi Gutmans]

At 05:44 PM 7/10/2002 +0900, Yasuo Ohgaki wrote:
>[EMAIL PROTECTED] wrote:
>>On Wed, 10 Jul 2002, Yasuo Ohgaki wrote:
>>
>>>Hmm. This tag is only for some win32 files.
>>>The name isn't sound good to me.
>>
>>This was brought up before, and it's only needed for some files due to 
>>incompabilities with the ZE1 stuff.
>>Derick
>
>I must have missed that thread and cannot find them with
>quick search.
>
>So we are supposed to use ZendEngine2 tag to support both
>ZE1 and ZE2 if needed, right?

Not sure. Harald created this branch for stuff he was doing. When I package 
Engine 2 alpha's I don't use the branch but use HEAD.

Andi


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] __CLASS__ and debug_backtrace()

[Phil Dier]

While experimenting with php-4.3.0 alpha, i discovered this.  Both __CLASS__ and 
debug_backtrace() 
give the wrong class name in the below program and they do so whether the method is 
called statically 
or on an instance.  Is this a bug or the desired behavour?  If the latter, wouldn't it 
be more useful if it 
gave the child class name?
print_something();

?>

Phil Dier   <[EMAIL PROTECTED]>
gett communications  
gett labs, inc.  


-- 
PHP Development Mailing List 
To unsubscribe, visit: http://www.php.net/unsub.php