#21310 [Com]: no such file (paths)
| From: | phil at pkcz dot net | Date: | Mon, 06 Jan 2003 18:02:29 +0000 |
| Subject: | #21310 [Com]: no such file (paths) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-29217@lists.php.net to get a copy of this message | ||
ID: 21310
Comment by: phil@pkcz.net
Reported By: czuma@poland.org
Status: Open
Bug Type: *Directory/Filesystem functions
Operating System: Solaris 8
PHP Version: 4.3.0
New Comment:
yes, same thing for me.
if HTTP server has permission to read all directories in path to the
file, all users can read directories of other user and it's really not
secure ...
Previous Comments:
------------------------------------------------------------------------
[2003-01-05 16:59:45] czuma@poland.org
In my humble opinion it is a bug, because:
1. Previous version of PHP (4.0) could read file without full path,
even if PHP couldnt read "." or higher directory.
2. PHP reads several directories (why?) when includes each file without
full path.
2. There is no technical reason to give PHP access to read all
directories from "/" to directories with PHP scripts.
------------------------------------------------------------------------
[2003-01-05 16:41:43] nicos@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
------------------------------------------------------------------------
[2003-01-05 16:37:36] czuma@poland.org
Module PHP can't find files (eg. includes them) if HTTP server hasn't
permission to read all directories in path to the file.
------------------------------------------------------------------------
[2002-12-31 05:10:31] czuma@poland.org
After upgrading to 4.3.0 version some PHP scripts stop working. I have
checked, that the reason is problem with opening and including files.
FIRST EXAMPLE:
I had to change variable:
$blocked_list["kom.pl"] = "blockkom.txt";
--->
$blocked_list["kom.pl"] = "<full-path>blockkom.txt";
SECOND EXAMPLE:
-----------------------------------------------------------
Warning: main(main/linie.php) [function.main]: failed to create stream:
No such file or directory in /www/klient34/start/dolacz.php on line 5
Warning: main() [function.main]: Failed opening 'main/linie.php' for
inclusion (include_path=''.:..:/usr/local/lib/php'') in
/www/klient34/start/dolacz.php on line 5
------------------------------------------------------------
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=21310&edit=1