#35261 [Ctl->Bgs]: php_admin_value does not lock include_path

From: Date: Tue, 13 Dec 2005 20:25:05 +0000
Subject: #35261 [Ctl->Bgs]: php_admin_value does not lock include_path
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-90391@lists.php.net to get a copy of this message 
 ID:               35261
 Updated by:       sniper@php.net
 Reported By:      Bjorn dot Wiberg at its dot uu dot se
-Status:           Critical
+Status:           Bogus
 Bug Type:         Apache2 related
 Operating System: *
 PHP Version:      5CVS-2005-12-13 (cvs)
 New Comment:

see bug #20377


Previous Comments:
------------------------------------------------------------------------

[2005-12-13 20:31:35] Bjorn dot Wiberg at its dot uu dot se

Thank you for trying this with the latest CVS version for me
(recompiling, preparing and installing into the chroots on our systems
takes a rather long time).

Just a quick note to tell that we're not using safe mode or
open_basedir restrictions on our server, but that the php_admin_*
probably should lock the settings nevertheless (so that they cannot be
overridden by PHP scripts or .htaccess files).

Also a note to tell that overriding php_admin_value:s in the main
server config with corresponding php_admin_value:s in vhost
configurations is fine with me -- I would hate to see that possibility
go away, as that is a pretty important feature for those of us doing
mass virtual hosting.

Best regards,
Björn

------------------------------------------------------------------------

[2005-12-13 17:33:45] sniper@php.net

This indeed works even when it shouldn't..


------------------------------------------------------------------------

[2005-12-13 16:58:20] Bjorn dot Wiberg at its dot uu dot se

Hi again!

Yes, it does indeed change the setting. I have tried this when
including classes in subdirectories; got "class not found" errors  when
not setting the desired path(s) in my script, but worked fine when I did
set the desired path(s) in my script. Although the setting should be
locked by httpd.conf...

Best regards,
Björn

------------------------------------------------------------------------

[2005-12-13 15:47:17] sniper@php.net

You can still "change" the value, but it won't REALLY change.

------------------------------------------------------------------------

[2005-12-13 15:46:17] sniper@php.net

Please try using this CVS snapshot:

  http://snaps.php.net/php5.1-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php5.1-win32-latest.zip



------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/35261

-- 
Edit this bug report at http://bugs.php.net/?id=35261&edit=1

Thread (10 messages)

« previous php.bugs (#90391) next »