#22233 [Com]: "mod_gzip_on yes" makes force-cgi-redirect disabled and incorrect PHP_SELF

From: Date: Tue, 18 Feb 2003 08:40:10 +0000
Subject: #22233 [Com]: "mod_gzip_on yes" makes force-cgi-redirect disabled and incorrect PHP_SELF
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-33379@lists.php.net to get a copy of this message 
 ID:               22233
 Comment by:       thorsten at phpmyfaq dot de
 Reported By:      zlo at canada dot com
 Status:           Verified
 Bug Type:         Apache related
 Operating System: RedHat 7.1, 7.2
 PHP Version:      4.3.1-dev
 New Comment:

reproduced with PHP 4.3.1 final with Debian Woody 3.0

My configure:
./configure --enable-track-vars=yes --enable-magic-quotes
--enable-versioning --disable-debug --enable-trans-sid
--enable-inline-optimization --enable-track-vars=yes
--enable-track-vars --with-db --with-gdbm --enable-force-cgi-redirect
--enable-mhash --with-openssl --with-iconv --with-mysql=/usr
-with-pgsql=/usr --with-ldap --enable-bcmath --enable-calendar
--enable-ftp --enable-memory-limit --enable-wddx --with-zlib
--with-zlib-dir=/usr/lib --with-ttf=/usr/lib --with-jpeg-dir=/usr/lib
--with-png-dir=/usr/lib --with-gd --with-freetype-dir=/usr
--enable-gd-native-ttf --enable-exif --enable-ctype --enable-shmop
--enable-sysvsem --enable-sysvshm --with-mcrypt --enable-discard-path
--enable-mbstring


Previous Comments:
------------------------------------------------------------------------

[2003-02-16 14:05:03] shane@php.net

reproducable with 4.2.3 and 4.0.6 on windows.

------------------------------------------------------------------------

[2003-02-15 18:52:59] sniper@php.net

Reproduced with PHP 4.3.1-dev..


------------------------------------------------------------------------

[2003-02-15 18:18:36] zlo at canada dot com

tried that, apparently it's not fixed.
just compiled php4-STABLE-200302152230, problem is still there.
when i turn on mod_gzip, its works like magic!

------------------------------------------------------------------------

[2003-02-15 17:23:37] sniper@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip


This should be fixed already.


------------------------------------------------------------------------

[2003-02-15 13:06:48] zlo at canada dot com

when "mod_gzip_on yes", PHP's force-cgi-redirect security mechanizm
becomes disabled (urls like /cgi-bin/php/test.php start working) and
PHP_SELF takes on a wrong value (/cgi-bin/php/test.php).
when "mod_gzip_on no", both aspects of the problem disappear.
problem has been observed on 2 different systems.
apache version: 1.3.26, 1.3.27
php version: latest snapshot
mod_gzip version: latest
php.ini does not exist.
php's configure:
./configure \
        --with-config-file-path=/path/to/php \
        --prefix=/path/to/php \
        --enable-force-cgi-redirect \
        --disable-cli \
        --enable-bcmath \
        --enable-trans-sid \
        --with-zlib-dir=/build/zlib-1.1.4 \
        --with-gd=/build/gd-1.8.4 \
        --with-png-dir=/build/png-1.2.4 \
        --with-jpeg-dir=/build/jpeg-6b \
        --with-freetype \

apache's configure:
./configure \
        --prefix=/path/to/apache \
        --enable-module=so \
        --enable-suexec \
        --suexec-caller=www \
        --suexec-docroot=/www \
no other modules loaded other than mod_gzip.
i thought this could well be PHP's problem. sorry if i'm wrong, then
please direct me to other possible sources of the problem.

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=22233&edit=1

Thread (19 messages)

« previous php.bugs (#33379) next »