#35261 [Ctl]: php_admin_value does not lock include_path
ID: 35261
User updated by: Bjorn dot Wiberg at its dot uu dot se
Reported By: Bjorn dot Wiberg at its dot uu dot se
Status: Critical
Bug Type: Apache2 related
Operating System: *
PHP Version: 5CVS-2005-12-13 (cvs)
New Comment:
Thank you for trying this with the latest CVS version for me
(recompiling, preparing and installing into the chroots on our systems
takes a rather long time).
Just a quick note to tell that we're not using safe mode or
open_basedir restrictions on our server, but that the php_admin_*
probably should lock the settings nevertheless (so that they cannot be
overridden by PHP scripts or .htaccess files).
Also a note to tell that overriding php_admin_value:s in the main
server config with corresponding php_admin_value:s in vhost
configurations is fine with me -- I would hate to see that possibility
go away, as that is a pretty important feature for those of us doing
mass virtual hosting.
Best regards,
Björn
Previous Comments:
------------------------------------------------------------------------
[2005-12-13 17:33:45] sniper@php.net
This indeed works even when it shouldn't..
------------------------------------------------------------------------
[2005-12-13 16:58:20] Bjorn dot Wiberg at its dot uu dot se
Hi again!
Yes, it does indeed change the setting. I have tried this when
including classes in subdirectories; got "class not found" errors when
not setting the desired path(s) in my script, but worked fine when I did
set the desired path(s) in my script. Although the setting should be
locked by httpd.conf...
Best regards,
Björn
------------------------------------------------------------------------
[2005-12-13 15:47:17] sniper@php.net
You can still "change" the value, but it won't REALLY change.
------------------------------------------------------------------------
[2005-12-13 15:46:17] sniper@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5.1-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5.1-win32-latest.zip
------------------------------------------------------------------------
[2005-12-13 13:49:08] Bjorn dot Wiberg at its dot uu dot se
Just confirmed that the same thing happens with PHP 5.1.1.
Best regards,
Björn
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/35261
--
Edit this bug report at http://bugs.php.net/?id=35261&edit=1
Thread (10 messages)