PHP 4.0 Bug #6480 Updated: doc_root fails in safe_mode

ID: 6480 User Update by: gvillemure@ik.ca Status: Feedback Bug Type: Scripting Engine problem Description: doc_root fails in safe_mode The content of info.php3 is: <?php phpinfo(); ?> I am referring to the file directly with: http://bkp.ik.ca/old/info.php3 Possibly relevant setting in php.ini: safe_mode = On safe_mode_exec_dir = /u/vhome/php3-safe safe_mode_allowed_env_vars = PHP_ memory_limit = 8388608 auto_prepend_file = auto_append_file = include_path = doc_root = /u/vhome user_dir = upload_max_filesize = 20971520 extension_dir = ./ enable_dl = On These setting are the same as what I use with 4.0.1pl2 and the problem dosen't come up... Note that I have receive emails from other users stating they have the same problem. Previous Comments: [2000-09-07 11:47:56] andi@php.net Are you sure you're not doing include "/u/vhome/ik.ca/www/old/info.php3"? safe_mode and doc_root ALWAYS appends the doc_root to the filename as far as I know. It doesn't check that the include you're doing is actually under the doc_root. You should use relative pathnames and not full paths. Anyway, let us know if we can close this bug. --------------------------------------------------------------------------- [2000-09-03 09:37:42] sniper@php.net bug report #6491 seems to be related to this one. --Jani --------------------------------------------------------------------------- [2000-09-03 06:15:01] gvillemure@ik.ca The path: /u/vhome/u/vhome/ik.ca/www/old/ dose not exist. The real path is: /u/vhome/ik.ca/www/old/ The /u/vhome is where I am trying to set doc_root to but if I turn on safe_mode I get path the error. The ownership/permissions in /old are: drwxr-xr-x 29500:98 . -rw-r--r-- 29500:98 info.php3 The Apache server is running as user 98 group 98. --------------------------------------------------------------------------- [2000-09-03 05:48:33] stas@php.net what are ownership/permissions on /u/vhome/u/vhome/ik.ca/www/old/ and /u/vhome/u/vhome/ik.ca/www/old/info.php3? --------------------------------------------------------------------------- [2000-08-31 19:59:26] gvillemure@ik.ca Problem: doc_root fails in safe_mode with PHP4.0.2 If I set the following in my /usr/local/lib/php.ini safe_mode = On doc_root = /u/vhome I get: Warning: Unable to access /u/vhome/u/vhome/ik.ca/www/old/info.php3 in Unknown on line 0 Warning: Failed opening '/u/vhome/ik.ca/www/old/info.php3' for inclusion (include_path='.:/usr/local/lib/php') in Unknown on line 0 Notice in the first line the /u/vhome is there twice. If I turn off safe_mode or remove doc_root then its fine. Thanks, Gerald Villemure Some info: System: RH6.1 #PHP4.0.2 ./configure --with-apache=../apache_1.3.12 --with-mysql --with-imap=../imap-4.7c --with-ldap --with-zlib --enable-debug=no --enable-memory-limit=yes --enable-safe-mode --enable-track-vars #Apache 1.3.12 ./configure --prefix=/usr/local/apache --enable-module=ssl --activate module=src/modules/php4/libphp4.a --disable-module=userdir --disable-module=actions --enable-module=rewrite --------------------------------------------------------------------------- The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online. Full Bug description available at: http://bugs.php.net/?id=6480