Re: Critical Bug #20887

> You are right. I verified Apache changes the cwd to / unless it's been > launched in single process mode. > > And I found results could be different by cases, using DSO or using CGI > executable. When you run your script with CGI executable and php.ini is > also present in that directory, the PHP binary tries to read that one as > mod_cgi tries to chdir to where the script is put. > I'm not sure, but this appears to imply some security issues? At the time CLI was introduced I argued to remove . from php.ini search path, but that was not accepted because some people apparently use this feature for having different configurations for different virtual hosts. Therefore . was removed only from CLI's php.ini search path. Edin