[PHP-DEV] Bug #15011 Updated: safe_mode_include_dir gives stupid results when configured in httpd.conf

2002-02-05 Thread jflemer
ID: 15011 Updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] -Status: Open +Status: Closed Bug Type: *Configuration Issues Operating System: Linux PHP Version: 4.1.1 New Comment: This bug has been fixed in CVS. Previous

[PHP-DEV] Bug #12119: safe mode owner check can be bypassed with symlink

2001-07-12 Thread jflemer
From: [EMAIL PROTECTED] Operating system: Solaris 8 PHP version: 4.0.6 PHP Bug Type: Scripting Engine problem Bug description: safe mode owner check can be bypassed with symlink php_checkuid() [ main/safe_mode.c:46 ] first checks the ownership of the file you are trying to o

[PHP-DEV] Bug #12121 Updated: chdir and safe_mode

2001-07-12 Thread jflemer
ID: 12121 Updated by: jflemer Reported By: [EMAIL PROTECTED] Status: Open Bug Type: *Directory/Filesystem functions Operating System: OpenBSD 2.7 PHP Version: 4.0.6 New Comment: [ in ext/standard/dir.c:274 ] I think that php_checkuid() should be called with CHECKUID_ALLOW_ONLY_FILE (whcih does

[PHP-DEV] Bug #12121 Updated: chdir and safe_mode

2001-07-13 Thread jflemer
ID: 12121 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: *Directory/Filesystem functions Operating System: OpenBSD 2.7 PHP Version: 4.0.6 Old Assigned To: Assigned To: jflemer New Comment: o Fixed Bug #12121: chdir and safe_mode - [ ext/standard

[PHP-DEV] Bug #12119 Updated: safe mode owner check can be bypassed with symlink

2001-07-13 Thread jflemer
ID: 12119 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Closed Bug Type: Scripting Engine problem Operating System: Solaris 8 PHP Version: 4.0.6 Old Assigned To: Assigned To: jflemer New Comment: o Fixed Bug #12119: safe mode owner check can be bypassed with

[PHP-DEV] Bug #12255 Updated: (In safe mode) The UID check in chdir don't test the good directory

2001-07-19 Thread jflemer
ID: 12255 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Duplicate Bug Type: Directory function related Operating System: Debian GNU/Linux sid PHP Version: 4.0.6 New Comment: I fixed this in CVS. This is a duplicate bug report. Previous Comments

[PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-31 Thread jflemer
ID: 12455 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Bogus Bug Type: *Math Functions Operating System: All PHP Version: 4.0.4pl1, 4.0.6 New Comment: Try moving your srand() call outside of the pwd() function. That should fix it. The posted script returns 4 for

[PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-31 Thread jflemer
ID: 12455 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Bogus Status: Open Bug Type: *Math Functions Operating System: All PHP Version: 4.0.4pl1, 4.0.6 New Comment: OK, well can you check to see that microtime() is working for you? This script should print out 100. BTW

[PHP-DEV] Bug #12455 Updated: Srand and shuffle give odd results

2001-07-31 Thread jflemer
ID: 12455 Updated by: jflemer Reported By: [EMAIL PROTECTED] Old Status: Open Status: Bogus Bug Type: *Math Functions Operating System: All PHP Version: 4.0.4pl1, 4.0.6 New Comment: open -> bogus Previous Comments: [2

[PHP-DEV] Bug #11322 Updated: Security hole in multiuser environment

2001-09-07 Thread jflemer
ID: 11322 Updated by: jflemer Reported By: [EMAIL PROTECTED] Status: Open Bug Type: Filesystem function related Operating System: Linux PHP Version: 4.0.4pl1 New Comment: It looks like the 'copy' command has been patched to check source and destination in CVS. Previou

[PHP-DEV] Bug #11751 Updated: PEAR cant be used with safe mode

2001-09-07 Thread jflemer
ID: 11751 Updated by: jflemer Reported By: [EMAIL PROTECTED] Status: Open Bug Type: *Configuration Issues Operating System: any PHP Version: 4.0 Latest CVS (2001-06-27) New Comment: You can set 'safe_mode_include_dir' to /usr/local/lib/php, and it works in safe mode. Maybe that sh