ID: 40419
Updated by: nlopess@php.net
Reported By: samuele dot diella at gmail dot com
-Status: No Feedback
+Status: Assigned
Bug Type: CGI related
Operating System: Slackware 10.2
PHP Version: 5.2.1
Assigned To: dmitry
New Comment:
feedback given.
Previous Comments:
------------------------------------------------------------------------
[2007-06-21 10:21:40] bugs at spuetz dot ath dot cx
I tried 5.2.3 and it doesn't work without patch.
I just created a vhost with unpatched 5.2.3:
http://bug40419.screenwork-dev.de/info.php
=> works
http://bug40419.screenwork-dev.de/info.php/
=> no input...
With patch:
http://www1.screenwork.de/mas/phpinfo.phphttp://www1.screenwork.de/mas/phpinfo.php/
Patched with: http://www1.screenwork.de/mas/40419.patch
Do you need anything else?
------------------------------------------------------------------------
[2007-05-29 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
[2007-05-21 11:51:49] jankorichter at yahoo dot de
Yes, cgi.fix_pathinfo is set to 1. I have checked it with phpinfo().
But it doesn't work without patch.
------------------------------------------------------------------------
[2007-05-21 11:31:04] dmitry@php.net
Check that cgi.fix_pathinfo in php.ini is set to 1.
I cannot reproduce the behavior and cannot understand how patch can fix
it.
------------------------------------------------------------------------
[2007-05-21 10:45:08] jankorichter at yahoo dot de
SCRIPT_FILENAME fixed.
--- php-5.2.2/sapi/cgi/cgi_main.c 2007-04-17 22:00:53.000000000
+0200
+++ php-5.2.2.new/sapi/cgi/cgi_main.c 2007-05-21 12:24:31.000000000
+0200
@@ -961,7 +961,15 @@
/* some server configurations allow '..' to slip
through in the
translated path. We'll just refuse to handle such
a path. */
if (script_path_translated &&
!strstr(script_path_translated, "..")) {
- SG(request_info).path_translated =
estrdup(script_path_translated);
+ char * real_path =
tsrm_realpath(script_path_translated, NULL TSRMLS_CC);
+ if ( real_path )
+ {
+ SG(request_info).path_translated =
estrdup(real_path);
+ script_path_translated =
_sapi_cgibin_putenv("SCRIPT_FILENAME", real_path TSRMLS_CC);
+ free(real_path);
+ } else {
+ SG(request_info).path_translated =
estrdup(script_path_translated);
+ }
}
SG(request_info).content_type = (content_type ?
content_type : "" );
SG(request_info).content_length = (content_length ?
atoi(content_length) : 0);
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/40419--
Edit this bug report at http://bugs.php.net/?id=40419&edit=1