Bug #74755 [NEW]: Host based open_basedir setting broke in 7.0.20 and 7.1.6
| From: | joshin at hotmail dot com | Date: | Tue, 13 Jun 2017 19:03:58 +0000 |
| Subject: | Bug #74755 [NEW]: Host based open_basedir setting broke in 7.0.20 and 7.1.6 | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-209521@lists.php.net to get a copy of this message | ||
From: joshin at hotmail dot com
Operating system: Linux
PHP version: 7.1.6
Package: *Configuration Issues
Bug Type: Bug
Bug description:Host based open_basedir setting broke in 7.0.20 and 7.1.6
Description:
------------
In previous versions of 7.0 & 7.1 I could use an ext file like the paste
in the "test script" area to limit access to files by the HOST variable
sent to PHP FPM.
With 7.0.20 and 7.1.6, the behavior changed. Now, the HOST setting
appears to be ignored, and the last open_basedir variable labeled in the
file (site3.com's) gets set.
This results in errors for "site1.com" and "site2.com".
Test script:
---------------
[HOST = site1.com]
open_basedir =
/home/www/whphx16/site1.com:/tmp:/home/www/phpmyadmin:/home/www/adminer
[HOST = site2.com]
open_basedir =
/home/www/whphx16/site2.com:/tmp:/home/www/phpmyadmin:/home/www/adminer
[HOST = site3.com]
open_basedir =
/home/www/whphx16/site3.com:/tmp:/home/www/phpmyadmin:/home/www/adminer
Expected result:
----------------
I expect each site to have a custom setting for open_basedir
Actual result:
--------------
All sites get the last entry's setting for open_basedir
--
Edit bug report at https://bugs.php.net/bug.php?id=74755&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=74755&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=74755&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=74755&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=74755&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=74755&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=74755&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=74755&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=74755&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=74755&r=support
Expected behavior: https://bugs.php.net/fix.php?id=74755&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=74755&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=74755&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=74755&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=74755&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=74755&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=74755&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=74755&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=74755&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=74755&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=74755&r=mysqlcfg