Bug #79083 [NEW]: 7.4.1 does not follow symlinks outside of documentroot while 7.4.0 does

From: Date: Wed, 08 Jan 2020 18:08:26 +0000
Subject: Bug #79083 [NEW]: 7.4.1 does not follow symlinks outside of documentroot while 7.4.0 does
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-224787@lists.php.net to get a copy of this message
From: calimeroteknik at free dot fr Operating system: Linux PHP version: 7.4.1 Package: FPM related Bug Type: Bug Bug description:7.4.1 does not follow symlinks outside of documentroot while 7.4.0 does Description: ------------ When I have a symbolic link in the path to a PHP file (could be a parent directory), which points outside of the DocumentRoot (apparently, this is what triggers the behavior) : - with php-fpm 7.4.0 it works, the file renders. - with php-fpm 7.4.1 I get the message "File not found." as the HTTP response, and "Primary script unknown" in the webserver's error log. open_basedir was unset in this test. Setting it to "/my/document/root:/path/to/symlink/destination" does not seem to change the results. This was tested using php-fpm with apache 2.4.41 (event MPM) with no change in both cases. Test script: --------------- <?php phpinfo(); -- Edit bug report at https://bugs.php.net/bug.php?id=79083&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=79083&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=79083&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=79083&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=79083&r=needscript Try newer version: https://bugs.php.net/fix.php?id=79083&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=79083&r=support Expected behavior: https://bugs.php.net/fix.php?id=79083&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=79083&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=79083&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=79083&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=79083&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=79083&r=dst IIS Stability: https://bugs.php.net/fix.php?id=79083&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=79083&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=79083&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=79083&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=79083&r=mysqlcfg

« previous php.bugs (#224787) next »