PHP 4.0 Bug #6480 Updated: doc_root fails in safe_mode

ID: 6480 Updated by: andi Reported By: gvillemure@ik.ca Status: Feedback Bug Type: Scripting Engine problem Assigned To: Comments: Are you sure you're not doing include "/u/vhome/ik.ca/www/old/info.php3"? safe_mode and doc_root ALWAYS appends the doc_root to the filename as far as I know. It doesn't check that the include you're doing is actually under the doc_root. You should use relative pathnames and not full paths. Anyway, let us know if we can close this bug. Previous Comments: [2000-09-03 09:37:42] sniper@php.net bug report #6491 seems to be related to this one. --Jani --------------------------------------------------------------------------- [2000-09-03 06:15:01] gvillemure@ik.ca The path: /u/vhome/u/vhome/ik.ca/www/old/ dose not exist. The real path is: /u/vhome/ik.ca/www/old/ The /u/vhome is where I am trying to set doc_root to but if I turn on safe_mode I get path the error. The ownership/permissions in /old are: drwxr-xr-x 29500:98 . -rw-r--r-- 29500:98 info.php3 The Apache server is running as user 98 group 98. --------------------------------------------------------------------------- [2000-09-03 05:48:33] stas@php.net what are ownership/permissions on /u/vhome/u/vhome/ik.ca/www/old/ and /u/vhome/u/vhome/ik.ca/www/old/info.php3? --------------------------------------------------------------------------- [2000-08-31 19:59:26] gvillemure@ik.ca Problem: doc_root fails in safe_mode with PHP4.0.2 If I set the following in my /usr/local/lib/php.ini safe_mode = On doc_root = /u/vhome I get: Warning: Unable to access /u/vhome/u/vhome/ik.ca/www/old/info.php3 in Unknown on line 0 Warning: Failed opening '/u/vhome/ik.ca/www/old/info.php3' for inclusion (include_path='.:/usr/local/lib/php') in Unknown on line 0 Notice in the first line the /u/vhome is there twice. If I turn off safe_mode or remove doc_root then its fine. Thanks, Gerald Villemure Some info: System: RH6.1 #PHP4.0.2 ./configure --with-apache=../apache_1.3.12 --with-mysql --with-imap=../imap-4.7c --with-ldap --with-zlib --enable-debug=no --enable-memory-limit=yes --enable-safe-mode --enable-track-vars #Apache 1.3.12 ./configure --prefix=/usr/local/apache --enable-module=ssl --activate module=src/modules/php4/libphp4.a --disable-module=userdir --disable-module=actions --enable-module=rewrite --------------------------------------------------------------------------- Full Bug description available at: http://bugs.php.net/?id=6480