Bug #53514 [Com]: open_basedir broken in PHP 5.3.15, denies all access to files
| From: | tomsommer@php.net | Date: | Fri, 10 Dec 2010 08:26:02 +0000 |
| Subject: | Bug #53514 [Com]: open_basedir broken in PHP 5.3.15, denies all access to files | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-156857@lists.php.net to get a copy of this message | ||
Edit report at http://bugs.php.net/bug.php?id=53514&edit=1
ID: 53514
Comment by: tomsommer@php.net
Reported by: tomsommer@php.net
Summary: open_basedir broken in PHP 5.3.15, denies all access
to files
Status: Open
Type: Bug
Package: Safe Mode/open_basedir
Operating System: Linux
PHP Version: 5.2.15
Block user comment: N
Private report: N
New Comment:
The commit that presumably broke it:
http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824
Previous Comments:
------------------------------------------------------------------------
[2010-12-10 09:24:39] tomsommer@php.net
Description:
------------
The fix for CVE-2010-3436 broke open_basedir
Might also affect PHP 5.3.4
consider
php_admin_value open_basedir
"/var/www/www.example.dk/:/var/www/tmp/:/usr/local/bin/safe/"
The DocumentRoot of the site is "/var/www/www.example.dk/www/"
Opening /var/www/www.example.dk/www/index.php
(http://example.dk/index.php) triggers:
Warning: Unknown: open_basedir restriction in effect.
File(/var/www/www.example.dk/www/index.php) is not within the allowed
path(s): (/var/www/www.example.dk/:/var/www/tmp/:/usr/local/bin/safe/)
in Unknown on line 0
Warning: Unknown: failed to open stream: Operation not permitted in
Unknown on line 0
Warning: Unknown: open_basedir restriction in effect.
File(/var/www/www.example.dk/www/index.php) is not within the allowed
path(s): (/var/www/www.example.dk/:/var/www/tmp/:/usr/local/bin/safe/)
in Unknown on line 0
Warning: Unknown: failed to open stream: Operation not permitted in
Unknown on line 0
Fatal error: Unknown: Failed opening required
'/var/www/www.example.dk/www/index.php'
(include_path='.:/usr/local/lib/php') in Unknown on line 0
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/bug.php?id=53514&edit=1