#29840 [Asn->Csd]: [PATCH] is_executable() does not honor safe_mode_exec_dir setting

From: Date: Sat, 09 Dec 2006 16:01:39 +0000
Subject: #29840 [Asn->Csd]: [PATCH] is_executable() does not honor safe_mode_exec_dir setting
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-106138@lists.php.net to get a copy of this message 
 ID:               29840
 Updated by:       iliaa@php.net
 Reported By:      markus at cultcom dot de
-Status:           Assigned
+Status:           Closed
 Bug Type:         Safe Mode/open_basedir
 Operating System: *
 PHP Version:      5CVS, 4CVS (2005-01-04)
 Assigned To:      tony2001
 New Comment:

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.




Previous Comments:
------------------------------------------------------------------------

[2005-12-19 18:17:29] sniper@php.net

tony2001: 2 words for you: Just commit! :)

------------------------------------------------------------------------

[2005-12-05 11:17:08] tomsommer@php.net

Any news on this?

Would appreciate this patch in PHP4 and PHP5

------------------------------------------------------------------------

[2005-08-12 01:00:33] tony2001@php.net

Please try this patch:
http://tony2001.phpclub.net/dev/tmp/bugs_29840_31618.diff
(with the latest snapshot/CVS).

------------------------------------------------------------------------

[2004-08-25 18:06:12] markus at cultcom dot de

Description:
------------
Seems to be a common problem nobody complains about...
"is_executable()" does not work in safe_mode!

Some PHP-Projects check for sendmail using this function and don't work
in safe_mode even if sendmail acutally IS executable (i.e. PEAR:
Mail.php).

is_executable() should at least honor the safe_mode_exec_dir directive!

Reproduce code:
---------------
<?php
if( is_executable( "/usr/sbin/sendmail" ) ) {
   print ("no probs!\n");
}
else {
   print ("this really sucks!\n");
}
?>

Try with PHP/CGI and suexec + safe_mode
where example-UID != sendmail-UID


Expected result:
----------------
true, what else?

Actual result:
--------------
false.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=29840&edit=1

Thread (9 messages)

« previous php.bugs (#106138) next »