Bug #53597 [Com]: open_basedir not working as documented

From: Date: Wed, 12 Jan 2011 16:25:07 +0000
Subject: Bug #53597 [Com]: open_basedir not working as documented
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-157856@lists.php.net to get a copy of this message
Edit report at http://bugs.php.net/bug.php?id=53597&edit=1

 ID:                 53597
 Comment by:         chroom dot chroom at gmail dot com
 Reported by:        hsk at fli-leibniz dot de
 Summary:            open_basedir not working as documented
 Status:             To be documented
 Type:               Bug
 Package:            Safe Mode/open_basedir
 Operating System:   Linux
 PHP Version:        5.3.4
 Assigned To:        pajoye
 Block user comment: N
 Private report:     N

 New Comment:

1 >> I confirm: open_basedir does not act as prefix

I experience the same problem with an earlier version: PHP 5.3.2 (API
20090626) on 32-bit Ubuntu 10.04.

2 >> A new case: open_basedir ending with a slash blocks PHP

Another problem with the same config option is: path ending with a slash
practically blocks PHP in an annoying way. With open_basedir set to
"/var/www/" it is expected to be able to serve files from this
directory, but it doesn't work. This is not only different from the
docs, this is nonsense. It's the behaviour that should be changed, not
only the docs. So please change the bug status.
This excerpt from errorlog documents this absurd:

PHP Warning:  Unknown: open_basedir restriction in effect. File(/var/
www/bits.php) is not within the allowed path(s): (/var/www/) in Unknown
on line 0


Previous Comments:
------------------------------------------------------------------------
[2011-01-10 16:31:14] pajoye@php.net

Docs need to be updated but that won't change.

------------------------------------------------------------------------
[2011-01-10 16:31:11] pajoye@php.net

Docs need to be updated but that won't change.

------------------------------------------------------------------------
[2011-01-10 15:34:55] aharvey@php.net

Ah, I see what you're getting at now. My apologies for closing the bug.

------------------------------------------------------------------------
[2011-01-10 14:38:23] hsk at fli-leibniz dot de

#53597 is definitely *not* a duplicate of #53577, please change status

open_basedir as of 5.3.4 (and 5.3.5 as well) no longer allows to specify
directory prefixes, in contradiction to the documentation

e.g., setting
  open_basedir = /u/phpMyAdmin
should accept files in /u/phpMyAdmin-3.3.8.1-all-languages, but does not

------------------------------------------------------------------------
[2010-12-24 05:29:41] aharvey@php.net

Duplicate of bug #53577.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    http://bugs.php.net/bug.php?id=53597


-- 
Edit this bug report at http://bugs.php.net/bug.php?id=53597&edit=1


Thread (9 messages)

« previous php.bugs (#157856) next »