#39711 [Opn->Csd]: shell_exec() fails in HTTPS mode when safe_mode = off (local)

ID: 39711 User updated by: joe at neosource dot com dot au Reported By: joe at neosource dot com dot au -Status: Open +Status: Closed Bug Type: Safe Mode/open_basedir Operating System: Linux / Apache/2.0.52 PHP Version: 4.4.4 New Comment: Sorry guys, The issue has now been resolved, I wasn't aware that the safe_mode setting is applied to the HTTPS and HTTP hosts separately. My ISP had warnings suppressed, so that'd probably explain why I didnt't find any error messages in the log files. Previous Comments: ------------------------------------------------------------------------ [2006-12-02 03:57:39] joe at neosource dot com dot au I noticed that phpinfo() shows safe_mode=on in HTTPS mode, but safe_mode=off in HTTP mode. Is there a separate safe_mode setting for HTTPS hosts ? ------------------------------------------------------------------------ [2006-12-02 03:26:38] joe at neosource dot com dot au Description: ------------ Hi, I have found that on PHP 4.4.4 shell_exec() fails when local safe_mode = off and master safe_mode = on - only when the script is a secure HTTPS URL. The problem does not appear in HTTP mode. shell_exec() and other related & safe_mode affected functions fail too such as is_executable() and file_exists(), but no error or warning message is generated. This bug caused me some grief over the past couple days as I had no idea why my sendmail script was behaving strangely as sometimes it'd work and other times it wouldn't (due to the site switching from HTTP/HTTPS mode). It wasn't an obvious bug to find, but after much debugging this is what I've found to be the cause. I hope you guys have as much fun squishing this bug as I did finding it ! :) Happy to offer any assistance with reproducing / troubleshooting the bug. Joe ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=39711&edit=1