Bug #74755 [NEW]: Host based open_basedir setting broke in 7.0.20 and 7.1.6

From: Date: Tue, 13 Jun 2017 19:03:58 +0000
Subject: Bug #74755 [NEW]: Host based open_basedir setting broke in 7.0.20 and 7.1.6
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-209521@lists.php.net to get a copy of this message
From: joshin at hotmail dot com Operating system: Linux PHP version: 7.1.6 Package: *Configuration Issues Bug Type: Bug Bug description:Host based open_basedir setting broke in 7.0.20 and 7.1.6 Description: ------------ In previous versions of 7.0 & 7.1 I could use an ext file like the paste in the "test script" area to limit access to files by the HOST variable sent to PHP FPM. With 7.0.20 and 7.1.6, the behavior changed. Now, the HOST setting appears to be ignored, and the last open_basedir variable labeled in the file (site3.com's) gets set. This results in errors for "site1.com" and "site2.com". Test script: --------------- [HOST = site1.com] open_basedir = /home/www/whphx16/site1.com:/tmp:/home/www/phpmyadmin:/home/www/adminer [HOST = site2.com] open_basedir = /home/www/whphx16/site2.com:/tmp:/home/www/phpmyadmin:/home/www/adminer [HOST = site3.com] open_basedir = /home/www/whphx16/site3.com:/tmp:/home/www/phpmyadmin:/home/www/adminer Expected result: ---------------- I expect each site to have a custom setting for open_basedir Actual result: -------------- All sites get the last entry's setting for open_basedir -- Edit bug report at https://bugs.php.net/bug.php?id=74755&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=74755&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=74755&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=74755&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=74755&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=74755&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=74755&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=74755&r=needscript Try newer version: https://bugs.php.net/fix.php?id=74755&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=74755&r=support Expected behavior: https://bugs.php.net/fix.php?id=74755&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=74755&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=74755&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=74755&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=74755&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=74755&r=dst IIS Stability: https://bugs.php.net/fix.php?id=74755&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=74755&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=74755&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=74755&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=74755&r=mysqlcfg

« previous php.bugs (#209521) next »