#35261 [Bgs->Opn]: php_admin_value does not lock include_path

ID: 35261 User updated by: Bjorn dot Wiberg at its dot uu dot se Reported By: Bjorn dot Wiberg at its dot uu dot se -Status: Bogus +Status: Open Bug Type: Apache2 related Operating System: * PHP Version: 5CVS-2005-12-13 (cvs) New Comment: Sorry to bother you again, but this ought to be pointed out in the documentation (that php_admin_value/php_admin_flag directives may be overridden by vhost configurations and ini_set in scripts but not .htaccess files) -- and also for which classes of configuration directives this applies (PHP_INI_ALL, PHP_INI_PERDIR?). Obviously the "Any directive type set with php_admin_value can not be overridden by .htaccess or virtualhost directives" statement of http://se2.php.net/configuration.changes is incorrect, as php_admin_* of the main server may very well be overridden by virtual host php_admin_* directives. Furthermore, it seems that the feature request of bug #20377 was indeed carried out (as directives may be overridden by vhost configurations), but your comment appears to indicate that there is another bug which describes a different problem; that of ini_set() being able to override main configuration/vhost configuration php_admin_* settings. If so, do you have a bug ID for that one? (If so, then this one would be marked as a dupe of that bug, I suppose, and bug #20377 could be closed, if all the requested functionality is already available.) Best regards, Björn Previous Comments: ------------------------------------------------------------------------ [2005-12-13 21:25:05] sniper@php.net see bug #20377 ------------------------------------------------------------------------ [2005-12-13 20:31:35] Bjorn dot Wiberg at its dot uu dot se Thank you for trying this with the latest CVS version for me (recompiling, preparing and installing into the chroots on our systems takes a rather long time). Just a quick note to tell that we're not using safe mode or open_basedir restrictions on our server, but that the php_admin_* probably should lock the settings nevertheless (so that they cannot be overridden by PHP scripts or .htaccess files). Also a note to tell that overriding php_admin_value:s in the main server config with corresponding php_admin_value:s in vhost configurations is fine with me -- I would hate to see that possibility go away, as that is a pretty important feature for those of us doing mass virtual hosting. Best regards, Björn ------------------------------------------------------------------------ [2005-12-13 17:33:45] sniper@php.net This indeed works even when it shouldn't.. ------------------------------------------------------------------------ [2005-12-13 16:58:20] Bjorn dot Wiberg at its dot uu dot se Hi again! Yes, it does indeed change the setting. I have tried this when including classes in subdirectories; got "class not found" errors when not setting the desired path(s) in my script, but worked fine when I did set the desired path(s) in my script. Although the setting should be locked by httpd.conf... Best regards, Björn ------------------------------------------------------------------------ [2005-12-13 15:47:17] sniper@php.net You can still "change" the value, but it won't REALLY change. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/35261 -- Edit this bug report at http://bugs.php.net/?id=35261&edit=1