Bug #79851 [NEW]: open_basedir no longer restricts access to http://
| From: | sjon@php.net | Date: | Mon, 13 Jul 2020 12:38:30 +0000 |
| Subject: | Bug #79851 [NEW]: open_basedir no longer restricts access to http:// | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-228000@lists.php.net to get a copy of this message | ||
From: sjon
Operating system: archLinux
PHP version: 8.0.0alpha2
Package: Filesystem function related
Bug Type: Bug
Bug description:open_basedir no longer restricts access to http://
Description:
------------
Previously open_basedir would prevent file-functions from accessing
protocols such as http. It no longer does, and this change doesn't
appear to be documented anywhere. This might simply need an entry in
upgrading as is correct according to
https://www.php.net/manual/en/function.fopen.php
originally found as https://3v4l.org/oLWdo
Test script:
---------------
$file = 'http://www.phpcodepad.com/index.php';
$newfile = 'example.txt';
copy($file, $newfile);
Expected result:
----------------
Warning: copy(): open_basedir restriction in effect.
File(http://www.phpcodepad.com/index.php) is not within the allowed
path(s): (/tmp:/in:/etc) in /in/oLWdo on line 5
Actual result:
--------------
Warning: copy(): php_network_getaddresses: getaddrinfo failed: Temporary
failure in name resolution in /in/oLWdo on line 5
--
Edit bug report at https://bugs.php.net/bug.php?id=79851&edit=1
--
Fix committed: https://bugs.php.net/fix.php?id=79851&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=79851&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=79851&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=79851&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=79851&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=79851&r=support
Expected behavior: https://bugs.php.net/fix.php?id=79851&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=79851&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=79851&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=79851&r=globals
PHP version support discontinued: https://bugs.php.net/fix.php?id=79851&r=phptooold
Daylight Savings: https://bugs.php.net/fix.php?id=79851&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=79851&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=79851&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=79851&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=79851&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=79851&r=mysqlcfg