Bug #14076 Updated: fopen() and touch() fail to create file under safe mode

ID: 14076 Updated by: a.genkin@utoronto.ca Reported By: a.genkin@utoronto.ca Status: No Feedback Bug Type: *Directory/Filesystem functions Operating System: Linux PHP Version: 4.0.6 New Comment: Erm... Hajo provided feedback. Previous Comments: ------------------------------------------------------------------------ [2002-05-04 00:00:04] php-bugs@lists.php.net No feedback was provided for this bug for over a month, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". ------------------------------------------------------------------------ [2002-04-17 03:35:34] phpbugs@noerenberg.de byg@cf1.ru wrote: >I could not reproduce this issue. >Here's my layout for the virtual server (from httpd.conf) The symlink has to be *within* path_to_site, e.g.: /var/www/ = symlink to /mnt/sda1/www /var/www/domain.com = apache document_root = php open_basedir Please see my posting from 16 Jan 1:21pm for details ( http://bugs.php.net/bug.php?id=14076 ). Hajo ------------------------------------------------------------------------ [2002-04-16 07:33:57] byg@cf1.ru I could not reproduce this issue. Here's my layout for the virtual server (from httpd.conf): DocumentRoot /path_to_site/html Options FollowSymLinks php_admin_value open_basedir path_to_sitephp_admin_value doc_root path_to_site php_admin_value safe_mode_include_dir path_to_site safe_mode=on in php.ini PHP version: both 4.0.6 and 4.2.0RC2 create PHP-script at "path_to_site/html/scriptname" create directory "path_to_site/html/test" writable by the apache user, then make symlink "path_to_site/html/test2" to that directory <? $fh=fopen("$DOCUMENT_ROOT/test2/1.txt", "w"); fwrite($fh, "test\n"); echo $fh,"\n"; fclose($fh); mkdir("$DOCUMENT_ROOT/test2/xxx/",770); ?> lynx http://sitename/scriptname gives "Resource id#1" No errors found in php_error_log, looked at path_to_site/html/test2/ and saw there both 1.txt contained "test" and xxx subdirectory. ------------------------------------------------------------------------ [2002-04-03 15:38:25] phpbugs@noerenberg.de Unfortunately this bug is *not* fixed in 4.2.0rc1. I can reproduce both problems (fopen fails if file does not exist / safe_mode_includedir does not work). If I use "real" path statements (e.g. /mnt/hda7/web/file.php instead of /var/web/file.php) everything works fine (please see my previous posts to #14076) Let me know if I can help with more tests or debug output. It would be very nice to have this problem fixed in the next release. Hajo ------------------------------------------------------------------------ [2002-04-03 11:59:12] derick@php.net This should be fixed. Please see www.php.net/~derick for the latest RC for 4.2.0m, and report back. Derick ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/14076 -- Edit this bug report at http://bugs.php.net/?id=14076&edit=1