Bug #79851 [NEW]: open_basedir no longer restricts access to http://

From: Date: Mon, 13 Jul 2020 12:38:30 +0000
Subject: Bug #79851 [NEW]: open_basedir no longer restricts access to http://
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-228000@lists.php.net to get a copy of this message
From: sjon Operating system: archLinux PHP version: 8.0.0alpha2 Package: Filesystem function related Bug Type: Bug Bug description:open_basedir no longer restricts access to http:// Description: ------------ Previously open_basedir would prevent file-functions from accessing protocols such as http. It no longer does, and this change doesn't appear to be documented anywhere. This might simply need an entry in upgrading as is correct according to https://www.php.net/manual/en/function.fopen.php originally found as https://3v4l.org/oLWdo Test script: --------------- $file = 'http://www.phpcodepad.com/index.php'; $newfile = 'example.txt'; copy($file, $newfile); Expected result: ---------------- Warning: copy(): open_basedir restriction in effect. File(http://www.phpcodepad.com/index.php) is not within the allowed path(s): (/tmp:/in:/etc) in /in/oLWdo on line 5 Actual result: -------------- Warning: copy(): php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution in /in/oLWdo on line 5 -- Edit bug report at https://bugs.php.net/bug.php?id=79851&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=79851&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=79851&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=79851&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=79851&r=needscript Try newer version: https://bugs.php.net/fix.php?id=79851&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=79851&r=support Expected behavior: https://bugs.php.net/fix.php?id=79851&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=79851&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=79851&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=79851&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=79851&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=79851&r=dst IIS Stability: https://bugs.php.net/fix.php?id=79851&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=79851&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=79851&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=79851&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=79851&r=mysqlcfg

« previous php.bugs (#228000) next »