#32388 [NEW]: specifing open_basedir or doc_root enables safe_mode even safe_mode is disabled

From: carlos-spam at wfmh dot org dot pl Operating system: Debian PHP version: 4.3.10 PHP Bug Type: Apache related Bug description: specifing open_basedir or doc_root enables safe_mode even safe_mode is disabled Description: ------------ Use of open_basedir or doc_root in vhost (apache 1) as shown below: php_admin_value open_basedir / php_admin_value doc_root / php_admin_flag safe_mode off enables safe_mode, even safe_mode is set to off, whcih spits out: Warning: main(): open_basedir restriction in effect. File(.//prepend.php) is not within the allowed path(s): (/) in <my-path> on line 18 Warning: main(prepend.php): failed to open stream: Operation not permitted in <my-path> on line 18 The above used to work with 4.3.4 but stopped after upgrade t 4.3.10-9 (debian package) Actual result: -------------- open_basedir, doc_root shall have no effect unless safe_mode is enabled -- Edit bug report at http://bugs.php.net/?id=32388&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=32388&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=32388&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=32388&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=32388&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=32388&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=32388&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=32388&r=needscript Try newer version: http://bugs.php.net/fix.php?id=32388&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=32388&r=support Expected behavior: http://bugs.php.net/fix.php?id=32388&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=32388&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=32388&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=32388&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=32388&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=32388&r=dst IIS Stability: http://bugs.php.net/fix.php?id=32388&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=32388&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=32388&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=32388&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=32388&r=mysqlcfg