#46925 [NEW]: when open_basedir="." the working directory is set to the executable location
| From: | eyal at zend dot com | Date: | Mon, 22 Dec 2008 11:55:29 +0000 |
| Subject: | #46925 [NEW]: when open_basedir="." the working directory is set to the executable location | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-132239@lists.php.net to get a copy of this message | ||
From: eyal at zend dot com
Operating system: Windows *
PHP version: 5.2.8
PHP Bug Type: Safe Mode/open_basedir
Bug description: when open_basedir="." the working directory is set to the executable
location
Description:
------------
NOTE: Tested with FastCGI module on IIS 7.
1. Verify you have info.php in your docroot.
2. Set the directive open_basedir="."
3. Request the script info.php
Reproduce code:
---------------
<?php phpinfo(): ?>
Expected result:
----------------
The phpinfo() output
Actual result:
--------------
PHP Warning: Unknown: open_basedir restriction in effect.
File(C:\inetpub\wwwroot\info.php) is not within the allowed path(s): (.) in
Unknown on line 0
To verify the location that is not restricted you can do the following:
Add a virtual directory to the default web site with a physical path of
the php-fastCGI.exe and put the info.php there as well.
Now you can see that when requesting the file from the virtual directory
you will receive the phpinfo() output.
--
Edit bug report at http://bugs.php.net/?id=46925&edit=1
--
Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=46925&r=trysnapshot52
Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=46925&r=trysnapshot53
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=46925&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=46925&r=fixedcvs
Fixed in CVS and need be documented: http://bugs.php.net/fix.php?id=46925&r=needdocs
Fixed in release: http://bugs.php.net/fix.php?id=46925&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=46925&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=46925&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=46925&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=46925&r=support
Expected behavior: http://bugs.php.net/fix.php?id=46925&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=46925&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=46925&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=46925&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=46925&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=46925&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=46925&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=46925&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=46925&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=46925&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=46925&r=mysqlcfg