[PHP-DEV] Bug #11940 Updated: ill side effect of open_basedir From: jason <email protected>
Date: 07/06/01

ID: 11940
Updated by: jason
Reported By: a.genkin <email protected>
Old-Status: Open
Status: Closed
Old-Bug Type: PHP options/info functions
Bug Type: *General Issues
Operating system:
PHP Version: 4.0.6
Assigned To:
Comments:

Sorry, I wrote that in a hurry.

ANY file open operation performed by php has to be in open_basedir. ( Including your main script. )
This is actually by design.

-Jason

Previous Comments:
---------------------------------------------------------------------------

[2001-07-06 18:25:15] a.genkin <email protected>

I may be missing something, but there is no include() or any other file-related operation in the sample script that I posted. All it has is 'echo "hello"'.

---------------------------------------------------------------------------

[2001-07-06 17:43:40] jason <email protected>

This is not a bug, include calls a file open operation,
and as such must be in the open_basedir path

-Jason

---------------------------------------------------------------------------

[2001-07-06 17:36:45] a.genkin <email protected>

safe_mode = On
doc_root = /homes/u0/apache
open_basedir = "/var/www/htdocs/workathome:/var/www/secure:/var/www/tmp"
(/var/www is a symlink for /homes/u0/apache)

In such a setting I should be able to execute PHP scripts from any directory under /homes/u0/apache, but not access any files unless they are under one of the directories in open_basedir. However, I cannot place any scripts in, say, /homes/u0/apache/cdf/deadlines/. A minimal file foo.php, saved there, containing only:

<?php echo "<html><body>Hello</body></html>"; ?>

Results in the script not executed, with the following error messages:

[Fri Jul 6 17:24:53 2001] [error] PHP Warning: open_basedir restriction in effect. File is in wrong directory in Unknown on line 0
[Fri Jul 6 17:24:53 2001] [error] PHP Warning: Failed opening '/homes/u0/apache/htdocs/cdf/deadlines/foo.php' for inclusion (include_path='') in Unknown on line 0

open_basedir's documentation says that it should only restrict directories from where a file can be opened by a PHP script.
http://www.php.net/manual/en/configuration.php

Many thanks, 

-- 
Arcady Genkin

---------------------------------------------------------------------------

ATTENTION! Do NOT reply to this email!
To reply, use the web interface found at http://bugs.php.net/?id=11940&edit=2

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>