Bug #79083 [Opn->Fbk]: 7.4.1 does not follow symlinks outside of documentroot while 7.4.0 does
| From: | sjon@php.net | Date: | Thu, 16 Jan 2020 08:55:47 +0000 |
| Subject: | Bug #79083 [Opn->Fbk]: 7.4.1 does not follow symlinks outside of documentroot while 7.4.0 does | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-224928@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=79083&edit=1
ID: 79083
Updated by: sjon@php.net
Reported by: calimeroteknik at free dot fr
Summary: 7.4.1 does not follow symlinks outside of
documentroot while 7.4.0 does
-Status: Open
+Status: Feedback
Type: Bug
Package: FPM related
Operating System: Linux
PHP Version: 7.4.1
Block user comment: N
Private report: N
New Comment:
fpm has no notion of a "DocumentRoot" - it gets passed the absolute path from the
webserver. It is therefore very likely your webserver resolves the symlink, not fpm.
You can verify this by enabling the fpm access.log and make sure it includes %f (the absolute script
path). If this indicates an issue in PHP itself, please update this bug with relevant information
Previous Comments:
------------------------------------------------------------------------
[2020-01-08 18:08:26] calimeroteknik at free dot fr
Description:
------------
When I have a symbolic link in the path to a PHP file (could be a parent directory), which points
outside of the DocumentRoot (apparently, this is what triggers the behavior) :
- with php-fpm 7.4.0 it works, the file renders.
- with php-fpm 7.4.1 I get the message "File not found." as the HTTP response, and
"Primary script unknown" in the webserver's error log.
open_basedir was unset in this test.
Setting it to "/my/document/root:/path/to/symlink/destination" does not seem to change the
results.
This was tested using php-fpm with apache 2.4.41 (event MPM) with no change in both cases.
Test script:
---------------
<?php phpinfo();
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=79083&edit=1