#19292 [Com]: random error: open_basedir restriction in effect. File is in wrong directory

ID: 19292 Comment by: robert.prokes@ignum.cz Reported By: tnowak@triger.com.pl Status: Critical Bug Type: Apache related Operating System: linux PHP Version: 4.3.0-dev,4.2.3 New Comment: We randomly gets this error even if virtual server has this option switched off. (but other virtual servers has this option on) Previous Comments: ------------------------------------------------------------------------ [2002-11-10 05:01:42] static@wicked.dj I get this problem alot on my site http://perthtunes.wicked.dj/ which is not hosted by me.. Apache Version 1.3.27 (Unix) Kernel Version 2.4.18-0.12 Perl Version 5.006001 PHP Version 4.2.3 the site has alot of nested include files and I seem to get a high rate of recreation of the error. seems to happen 1 in every 5 or so page views for most users. ------------------------------------------------------------------------ [2002-10-31 04:17:18] mbr@freebsd.org Can you mark this critical ? ------------------------------------------------------------------------ [2002-10-30 00:56:28] david@ols.es I also have this problem, in both Solaris 8 and Linux Mandrake with Apache 1.2.27 with PHP 4.2.2, 4.2.3 and also 4.3.0r2. In all cases the followig example does not work and php complains about open_basedir restriction in all but in 4.3.0r2, where the example does not work and no warning or error message is issued. You can reproduce this situation with 3 php scripts with safe_mode on: /usr/local/http-docs/common/scripts/test.php -------------- <?php include("test/test.php"); ?> /usr/local/http-docs/common/lib/test/test.php ------------- <?php phpinfo(); echo "hello"; include("hello.php"); ?> /usr/local/http-docs/common/lib/test/hello.php ------------- <?php echo "hello world"; ?> Apache configuration to reproduce the situation -------------- <Directory "/usr/local/http-docs/common/lib/"> Options none AllowOverride None Order allow,deny Deny from all </Directory> Alias /scripts/ "/usr/local/http-docs/common/scripts/" <Directory "/usr/local/http-docs/common/scripts/"> Options none AllowOverride None Order allow,deny Allow from all php_admin_value open_basedir /usr/local/http-docs/common/scripts/:/usr/local/http-docs/common/lib </Directory> <VirtualHost 192.168.0.3> ServerName 192.168.0.3 DocumentRoot /usr/local/http-docs/test php_admin_value open_basedir /usr/local/http-docs/test:/usr/local/http-docs/common/lib:/var/tmp:/usr/local/lib/php php_admin_value doc_root /usr/local/http-docs/test </VirtualHost> to reproduce the error just go to http://192.168.0.3/scripts/test.php altough phpinfo() on /usr/local/http-docs/common/lib/test/test.php shows that open_basedir includes /usr/local/http-docs/common/lib php fails to open hello.php ------------------------------------------------------------------------ [2002-10-24 10:32:15] mbr@freebsd.org Looks like this bug is more serious than I thought. With my workaround I get now randomly: [24-Oct-2002 17:18:04] PHP Warning: Failed opening '/include/banner.php' for inclusion (include_path='.') in /www/doc/www.aaa.ch-80/wrapper.php on line 45 [24-Oct-2002 17:18:04] PHP Warning: Failed opening '/include/services_2nd.inc' for inclusion (include_path='.') in /www/doc/www.aaa.ch-80/wrapper.php on line 132 It really looks into the wrong dirs. zend_get_executed_filename(TSRMLS_C) and path are not the always the same. Maybe this is a off by one error somewhere ? Martin ------------------------------------------------------------------------ [2002-10-24 05:05:47] mbr@freebsd.org Heh, now happens the opposite: [24-Oct-2002 11:55:45] PHP Warning: open_basedir: File should be in /www/doc/www.customer.ch-80, but is in /www/doc/www.customer.org-80/photos/index.php file (/www/doc/www.aaa.ch-80/formmail.php) in Unknown on line 0 I added now both cases. Works so far :P but doesn't solve the real problem. http://people.freebsd.org/~mbr/patches/fopen_wrappers.c.diff ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/19292 -- Edit this bug report at http://bugs.php.net/?id=19292&edit=1