Bug #53597 [Opn->Dup]: open_basedir not working as documented

From: Date: Fri, 24 Dec 2010 04:29:41 +0000
Subject: Bug #53597 [Opn->Dup]: open_basedir not working as documented
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-157294@lists.php.net to get a copy of this message 
Edit report at http://bugs.php.net/bug.php?id=53597&edit=1

 ID:                 53597
 Updated by:         aharvey@php.net
 Reported by:        hsk at fli-leibniz dot de
 Summary:            open_basedir not working as documented
-Status:             Open
+Status:             Duplicate
 Type:               Bug
-Package:            *Directory/Filesystem functions
+Package:            Safe Mode/open_basedir
 Operating System:   Linux
 PHP Version:        5.3.4
 Block user comment: N
 Private report:     N

 New Comment:

Duplicate of bug #53577.


Previous Comments:
------------------------------------------------------------------------
[2010-12-23 12:38:27] hsk at fli-leibniz dot de

Description:
------------
the php manual in the section "Description of core php.ini directives"
(http://www.php.net/manual/en/ini.core.php, checked on 23-dec-10 11:55
utc)
states:

The restriction specified with open_basedir is actually a prefix, not a
directory name.

this has been so "ever since", but seems now broken at release 5.3.4 -
specifying directory name prefix gives access denied errors, only
specifying complete directory name seems to work.

if the described behaviour is intentional, please fix the documentation
*and note the change in BIG BOLD LETTERS in the release announcement*,
or, better, fix the php-code to behave as documented.

Test script:
---------------
phpmyadmin installed and configured in
/u/phpMyAdmin-3.3.8.1-all-languages

entry in /usr/lib/php.ini :

open_basedir = /tmp/:/u/phpMyAdmin:/usr/lib/php/

according to the documentation, this should give access to the
phpmyadmin installation, and used to do so up to php-5.3.3, but now, as
of php-5.3.4, gives an error message
open_basedir restriction in effect.
File(/u/phpMyAdmin-3.3.8.1-all-languages/index.php) is not within the
allowed path(s): (/tmp/:/u/phpMyAdmin:/usr/lib/php/)

it works when changing /usr/lib/php.ini to 
open_basedir = /tmp/:/u/phpMyAdmin-3.3.8.1-all-languages:/usr/lib/php/



------------------------------------------------------------------------



-- 
Edit this bug report at http://bugs.php.net/bug.php?id=53597&edit=1

Thread (9 messages)

« previous php.bugs (#157294) next »