Bug #80385 [ReO]: Response data preceded by post data

From: Date: Tue, 23 Nov 2021 12:56:21 +0000
Subject: Bug #80385 [ReO]: Response data preceded by post data
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-237942@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=80385&edit=1

 ID:                 80385
 Updated by:         bukka@php.net
 Reported by:        306503207 at qq dot com
 Summary:            Response data preceded by post data
 Status:             Re-Opened
 Type:               Bug
 Package:            FPM related
 Operating System:   CentOS 7.4
 PHP Version:        7.2.34
 Assigned To:        bukka
 Block user comment: N
 Private report:     N

 New Comment:

I meant as much details as possible about the environment will be helpful too.


Previous Comments:
------------------------------------------------------------------------
[2021-11-23 12:54:47] bukka@php.net

Is anyone able to provide reproducible steps that can lead to this problem in recreatable
environment?

If it's too difficult it could also help to use to analyze the traffic going to the instance
(e.g. using tcpdump or similar) and possibly checking if PHP_ADMIN_VALUE with auto_prepend_file can
be seen there.

In general as much as details about your environemnt setup would be helpful for futher
investigation.

Potentially I could also prepare a quick patch that will disable PHP_ADMIN_VALUE setting through
fcgi but would require someone who is experiencing the issue and is willing to compile and deploy
patched php-fpm to the server...

------------------------------------------------------------------------
[2021-11-22 21:42:08] requinix@php.net

Does anyone replying to this NOT have their port 9000 open to the internet and ripe for abuse? Even
if you're sure you do not, use an online port checker to verify it.

------------------------------------------------------------------------
[2021-11-22 21:16:33] dklugmann2 at yahoo dot com

We also have this problem on Centos 7.

I have tried setting the auto_prepend_file to blank in all the possible config files but it
doesn't help. The issue comes back in a number of hours

Just to stress this is a major bug and makes running our website through docker very difficult if
not impossible as all kinds of parameters are displayed to the user. A pity as Docker is in many
ways an excellent product.

I hope someone in the team can take a look at the issue as it has been a year now since the first
comments above.

Our only solution for now is to bounce the container every few hours which is not ideal.

Thanks

------------------------------------------------------------------------
[2021-11-21 16:03:46] blissweb at hotmail dot com

We have this issue.  Our FPM port is set to 9001, so its not related to 9000.   Centos 7.4.25
php-fpm  7.9 centos.  As others have said, the auto_prepend_file starts getting set on its own.

------------------------------------------------------------------------
[2021-04-29 13:34:56] nikic@php.net

I've been trying to reproduce this issue based on the instructions from en3py at hotmail dot
com, but wasn't able to. I'm not seeing any changes in phpinfo output after querying the
FPM status page.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=80385


--
Edit this bug report at https://bugs.php.net/bug.php?id=80385&edit=1

Thread (53 messages)

« previous php.bugs (#237942) next »