ID: 33723
Updated by: sniper@php.net
Reported By: ezmlm at mail dot ru
Status: Critical
Bug Type: Apache related
Operating System: Linux
PHP Version: 5CVS-2005-07-18
New Comment:
Solved. I had wrong permissions and owners set on the path and script I
used. safe-mode works as expected.
Previous Comments:
------------------------------------------------------------------------
[2005-07-18 19:18:20] sniper@php.net
I can't get safe-mode to work at all when using PHP CVS HEAD (5.1-dev).
No matter where I set it, be it php.ini or httpd.conf
------------------------------------------------------------------------
[2005-07-18 10:35:56] ezmlm at mail dot ru
I've tried. safe_mode is really turned off. I can use system and exec
and read other users files that are readable by apache.
For instance system('cat /etc/passwd') works fine
------------------------------------------------------------------------
[2005-07-18 10:27:18] sniper@php.net
Even if phpinfo() shows that some .ini option has different value, it's
not necessarily true. Try do something that "safe"
mode should prevent you from doing.
------------------------------------------------------------------------
[2005-07-18 09:35:18] ezmlm at mail dot ru
The same problem with php5-latest
------------------------------------------------------------------------
[2005-07-18 02:16:29] sniper@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5-win32-latest.zip
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/33723--
Edit this bug report at http://bugs.php.net/?id=33723&edit=1