#33723 [Ctl->Csd]: php_value overrides php_admin_value

From: Date: Mon, 01 Aug 2005 08:49:34 +0000
Subject: #33723 [Ctl->Csd]: php_value overrides php_admin_value
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-82754@lists.php.net to get a copy of this message 
 ID:               33723
 Updated by:       dmitry@php.net
 Reported By:      ezmlm at mail dot ru
-Status:           Critical
+Status:           Closed
 Bug Type:         Apache related
 Operating System: Linux
 PHP Version:      5CVS-2005-07-18
-Assigned To:      
+Assigned To:      dmitry
 New Comment:

Fixed in CVS HEAD and PHP_5_0.


Previous Comments:
------------------------------------------------------------------------

[2005-07-21 00:09:12] sniper@php.net

Note: PHP 4.4.0 works fine, this only happens with PHP 5.


------------------------------------------------------------------------

[2005-07-20 23:52:54] sniper@php.net

Verified: This only happens with Apache 1.3.x.


------------------------------------------------------------------------

[2005-07-16 13:22:11] ezmlm at mail dot ru

Description:
------------
PHP5 for apache 1.3.33 built as DSO allows php_admin_value
(php_admin_flag) options marked as PHP_INI_SYSTEM to be reset in
.htaccess files by using php_value (php_flag). safe_mode for example.

To demonstrate the problem in php.ini set safe_mode = Off, in
httpd.conf, set:
php_admin_value safe_mode on

Get phpinfo to verify that safe_mode is on.

Now create .htaccess file in document_root containing:
php_flag safe_mode off

(or even php_flag safe_mode on)

Get phpinfo again and note that safe_mode was reset to off (php.ini
initial value)




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=33723&edit=1

Thread (15 messages)

« previous php.bugs (#82754) next »