Bug #80113 [Com]: .user.ini may not be applied in subdirectories if CONTEXT_DOCUMENT_ROOT is set

Edit report at https://bugs.php.net/bug.php?id=80113&edit=1 ID: 80113 Comment by: willypbender83 at gmail dot com Reported by: mattr at wordfence dot com Summary: .user.ini may not be applied in subdirectories if CONTEXT_DOCUMENT_ROOT is set Status: Open Type: Bug Package: CGI/CLI related Operating System: Linux PHP Version: 8.0.0beta3 Block user comment: N Private report: N New Comment: This was introduced as a fix for https://bugs.php.net/bug.php?id=64865 What are you using CONTEXT_DOCUMENT_ROOT for? Not for UserDir module? Previous Comments: ------------------------------------------------------------------------ [2020-09-16 21:09:01] mattr at wordfence dot com Description: ------------ The .user.ini file is no longer applied in subdirectories, when Apache is configured to serve PHP via CGI with configuration like this: ScriptAlias /local-bin /usr/local/bin AddHandler application/x-httpd-php-8-0 .php Action application/x-httpd-php-8-0 /local-bin/php-cgi As far as I can tell, this is caused by the new handling of CONTEXT_DOCUMENT_ROOT in sapi_cgi_activate() in sapi/cgi/cgi_main.c. Using phpinfo, I see that CONTEXT_DOCUMENT_ROOT is not where the php files are located: CONTEXT_DOCUMENT_ROOT: /usr/local/bin DOCUMENT_ROOT: /home/user/public_html When php_cgi_ini_activate_user_config() checks if the script is inside the document root, it is using the value from CONTEXT_DOCUMENT_ROOT, which doesn't match -- so it is no longer looking in parent directories for .user.ini files. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=80113&edit=1