PHP 4.0 Bug #7744: safe mode php wrong script uid
| From: | meik dot doell at eed dot ericsson dot se | Date: | Fri, 10 Nov 2000 10:54:28 +0000 |
| Subject: | PHP 4.0 Bug #7744: safe mode php wrong script uid | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-37665@lists.php.net to get a copy of this message | ||
From: meik.doell@eed.ericsson.se
Operating system: SunOS 5.6
PHP version: 4.0.3pl1
PHP Bug Type: *Configuration Issues
Bug description: safe mode php wrong script uid
in safe mode, the php script uid seems to default to 1 instead of the httpd uid (taken from apache
httpd process)
case 1)
no safe mode: apache runs as http uid 11101 and a php script readable by uid 11101 can be accessed
and is parsed - fine.
case 2)
now safe mode is enabled and a php script owned by uid 11101 or in a directory owned by 11101 is
read but not parsed. Message is "Warning: SAFE MODE Restriction in effect. The script whose uid
is 1 is not allowed to access /path/script.php3 owned by uid 11101 in Unknown on line 0."
I am sure that apache does not run with uid 1 but with uid 11101 because scripts readable by uid 1
but not 11101 are not even found by apache (403 forbidden).
Where does the php script uid 1 come from?
The only way to get php4 and safe mode working now is to have the directory or file owned by uid 1
which is neither apache's uid nor the user's uid - i can't imagine this is
intentional?
--
Edit Bug report at: http://bugs.php.net/?id=7744&edit=1