#33723 [Opn->Fbk]: php_value overrides php_admin_value

From: Date: Mon, 18 Jul 2005 00:16:30 +0000
Subject: #33723 [Opn->Fbk]: php_value overrides php_admin_value
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-81983@lists.php.net to get a copy of this message 
 ID:               33723
 Updated by:       sniper@php.net
 Reported By:      ezmlm at mail dot ru
-Status:           Open
+Status:           Feedback
 Bug Type:         Apache related
 Operating System: Linux
 PHP Version:      5.0.4
 New Comment:

Please try using this CVS snapshot:

  http://snaps.php.net/php5-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5-win32-latest.zip




Previous Comments:
------------------------------------------------------------------------

[2005-07-16 13:22:11] ezmlm at mail dot ru

Description:
------------
PHP5 for apache 1.3.33 built as DSO allows php_admin_value
(php_admin_flag) options marked as PHP_INI_SYSTEM to be reset in
.htaccess files by using php_value (php_flag). safe_mode for example.

To demonstrate the problem in php.ini set safe_mode = Off, in
httpd.conf, set:
php_admin_value safe_mode on

Get phpinfo to verify that safe_mode is on.

Now create .htaccess file in document_root containing:
php_flag safe_mode off

(or even php_flag safe_mode on)

Get phpinfo again and note that safe_mode was reset to off (php.ini
initial value)




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=33723&edit=1

Thread (15 messages)

« previous php.bugs (#81983) next »