Bug #78136 [NEW]: False warnings may occur with open_basedir.

From: Date: Mon, 10 Jun 2019 05:12:09 +0000
Subject: Bug #78136 [NEW]: False warnings may occur with open_basedir.
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-221202@lists.php.net to get a copy of this message
From:             ramsydx at gmail dot com
Operating system: 
PHP version:      7.3.6
Package:          *General Issues
Bug Type:         Bug
Bug description:False warnings may occur with open_basedir.

Description:
------------
Even if the directory does not exist, you will get the same warning as a
path that does not apply to open_basedir.


Test script:
---------------
<?php
$dir_safe = __DIR__.'/dir.' . basename(__FILE__,'.php') . '.safe';
ini_set('open_basedir',"{$dir_safe}/");
file_put_contents("{$dir_safe}/test.txt","shall work");


Expected result:
----------------
Warning: file_put_contents(/FOO/dir.new.safe/test.txt): failed to open
stream: No such file or directory in /FOO/test.php on line 4

Actual result:
--------------
Warning: file_put_contents(): open_basedir restriction in effect.
File(/FOO/dir.new.safe/test.txt) is not within the allowed path(s):
(/FOO/dir.new.safe/) in /FOO/new.php on line 4

Warning: file_put_contents(/FOO/dir.new.safe/test.txt): failed to open
stream: Operation not permitted in /FOO/new.php on line 4

-- 
Edit bug report at https://bugs.php.net/bug.php?id=78136&edit=1
-- 
Try a snapshot (PHP 5.4):   https://bugs.php.net/fix.php?id=78136&r=trysnapshot54
Try a snapshot (PHP 5.5):   https://bugs.php.net/fix.php?id=78136&r=trysnapshot55
Try a snapshot (trunk):     https://bugs.php.net/fix.php?id=78136&r=trysnapshottrunk
Fixed in SVN:               https://bugs.php.net/fix.php?id=78136&r=fixed
Fixed in release:           https://bugs.php.net/fix.php?id=78136&r=alreadyfixed
Need backtrace:             https://bugs.php.net/fix.php?id=78136&r=needtrace
Need Reproduce Script:      https://bugs.php.net/fix.php?id=78136&r=needscript
Try newer version:          https://bugs.php.net/fix.php?id=78136&r=oldversion
Not developer issue:        https://bugs.php.net/fix.php?id=78136&r=support
Expected behavior:          https://bugs.php.net/fix.php?id=78136&r=notwrong
Not enough info:            https://bugs.php.net/fix.php?id=78136&r=notenoughinfo
Submitted twice:            https://bugs.php.net/fix.php?id=78136&r=submittedtwice
register_globals:           https://bugs.php.net/fix.php?id=78136&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=78136&r=php4
Daylight Savings:           https://bugs.php.net/fix.php?id=78136&r=dst
IIS Stability:              https://bugs.php.net/fix.php?id=78136&r=isapi
Install GNU Sed:            https://bugs.php.net/fix.php?id=78136&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=78136&r=float
No Zend Extensions:         https://bugs.php.net/fix.php?id=78136&r=nozend
MySQL Configuration Error:  https://bugs.php.net/fix.php?id=78136&r=mysqlcfg



Thread (2 messages)

« previous php.bugs (#221202) next »