#42077 [NoF->Csd]: Why have the session folder in open_basedir
ID: 42077
Updated by: stas@php.net
Reported By: spam2 at rhsoft dot net
-Status: No Feedback
+Status: Closed
Bug Type: Session related
Operating System: Linux
PHP Version: 5CVS-2007-07-23 (snap)
Assigned To: stas
New Comment:
I've fixed it to work as before and only check open_basedir if set by
user in runtime or .htaccess.
P.S. yes it was in rc1. But not in rc2 and won't be in 5.2.4. If you
still see it in 5.2 CVS cry aloud.
Previous Comments:
------------------------------------------------------------------------
[2007-08-16 20:28:13] phpbugs at thequod dot de
I can confirm that the bug is fixed, too.
Thank you.
------------------------------------------------------------------------
[2007-08-14 01:00:00] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
[2007-08-07 08:55:38] harry at rhsoft dot net
Yes seems to work correct
<?php
session_start();
echo $a;
phpinfo();
?>
Notice: Undefined variable: a in /mnt/data/www/www.rhsoft.net/test.php
on line 3
PHP Version 5.2.4RC1-dev
__________
Session was started with a save-path outside open_basedir
The Warning-Message was written in the global error_log also outside
open_basedir
------------------------------------------------------------------------
[2007-08-07 00:25:39] jani@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5.2-latest.tar.gz
For Windows (zip):
http://snaps.php.net/win32/php5.2-win32-latest.zip
For Windows (installer):
http://snaps.php.net/win32/php5.2-win32-installer-latest.msi
AFAIK, this is now fixed. Please try the snapshot.
------------------------------------------------------------------------
[2007-08-03 18:13:36] harry at rhsoft dot net
Nice - The bug is present and you make a release candidate?
Aug 2007, PHP 5.2.4
02 Aug 2007, PHP 5.2.4RC1
Hopefully this is a joke......
If this will go to final i need a address to send a bill for changing
200 Host-Files on some servers!
Need to make for each one a session-directory and set it to
open_basedir or a stupid global configuration that allows scripts
reading of all session-files from other users too.
But what should we do with global error_log?
Give all Hosts access to the log-folder? NO - Never!
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/42077
--
Edit this bug report at http://bugs.php.net/?id=42077&edit=1
Thread (9 messages)