Bug #16927 Updated: open_basedir restriction doesn't work

ID: 16927 Updated by: mfischer@php.net Reported By: peton@cavalex.com -Status: Analyzed +Status: Closed Bug Type: ZZiplib Related Operating System: Linux 2.4.18 PHP Version: 4.2.0 New Comment: This bug has been fixed in CVS. You can grab a snapshot of the CVS version at http://snaps.php.net/. In case this was a documentation problem, the fix will show up soon at http://www.php.net/manual/. In case this was a PHP.net website problem, the change will show up on the PHP.net site and on the mirror sites. Thank you for the report, and for helping us make PHP better. Previous Comments: ------------------------------------------------------------------------ [2002-04-30 09:00:41] mfischer@php.net Confirmed, this function has no signs of honoring safe_mode. ------------------------------------------------------------------------ [2002-04-30 08:48:09] peton@cavalex.com Hello, With the following value: '/sites/cavalex.com/html:/usr/local/tool/php4/lib/php' for the open_basedir variable, all these commands work without error (or warning): $zip = zip_open("/sites/cavalex.com/html/test.zip"); $zip = zip_open("/tmp/test.zip"); $zip = zip_open("/sites/other.net/html/test2.zip"); I was waiting for an open_basedir restriction for the two last. Probably a lack of test for this open command. --- config ---- safe_mode On open_basedir /sites/cavalex.com/html:/usr/local/tool/php4/lib/php --- compil --- zziplib-0.11.15.tar.gz apache-2.3.24 php-4.2.0 './configure' '--prefix=/usr/local/tool/php4' '--with-apxs=/usr/local/tool/apache/bin/apxs' '--with-mysql=/usr/local/tool/mysql' '--with-pgsql=/usr' '--with-zlib' '--with-bz2' '--with-zip=/usr/local/tool/zziplib' '--with-dom=/usr/lib' '--with-gd=/usr/local' '--with-ttf' '--with-freetype-dir=/usr/local/tool/freetype' '--with-t1lib=/usr/local/tool/t1lib' '--with-pdflib=/usr/local/tool/pdflib' '--with-bcmath' '--with-tiff-dir=/usr/lib' '--with-png-dir=/usr/lib' '--with-jpeg-dir=/usr/lib' '--with-xpm-dir=/usr/X11R6' '--with-iconv' '--disable-debug' '--enable-xslt' '--with-xslt-sablot=/usr/local/tool/Sablot' '--with-expat-dir=/usr/local/tool/expat' '--enable-safe-mode' '--enable-memory-limit' '--enable-ftp' '--enable-calendar' '--enable-trans-sid=yes' '--enable-sysvshm=yes' '--enable-sysvsem=yes' '--enable-debug=no' '--enable-force-cgi-redirect=yes' ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=16927&edit=1