Bug #62037 [Opn->Fbk]: .user.ini ignores open_basedir parameter
Edit report at https://bugs.php.net/bug.php?id=62037&edit=1
ID: 62037
Updated by: sixd@php.net
Reported by: karlis dot kisis at gmail dot com
Summary: .user.ini ignores open_basedir parameter
-Status: Open
+Status: Feedback
Type: Bug
Package: Safe Mode/open_basedir
Operating System: CentOS 6.2 x86_64
PHP Version: 5.3.13
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2012-05-15 15:17:13] reeze dot xia at gmail dot com
Please refer: http://cn.php.net/manual/en/ini.core.php#ini.open-basedir
âAs of PHP 5.3.0 open_basedir can be tightened at run-timeâ
This means you can only make the path more deep but can't move back.
if not there will be security problem.
Maybe this is your problem
------------------------------------------------------------------------
[2012-05-15 15:01:40] karlis dot kisis at gmail dot com
turns out that if the master value for open_basedir is None, then .user.ini value works!
seems that .user.ini cannot override the master value from php.ini if open_basedir is defined.
still a bug in my opinion.
------------------------------------------------------------------------
[2012-05-15 14:33:52] karlis dot kisis at gmail dot com
Description:
------------
open_basedir parameter is ignored in .user.ini:
max_input_time = 333
open_basedir = "/home"
display_errors = On
include_path = "/home"
the rest of the parameters from above work fine.
php is run as fcgi on apache 2.2.22 with mod_fcgid.c.
according to the docs, open_basedir should be configurable anywhere since version 5.3
Test script:
---------------
changed parameters are shown in phpinfo(), except open_basedir which remains unchanged.
Expected result:
----------------
open_basedir setting from .user.ini to be in effect.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62037&edit=1
Thread (5 messages)