ASPN ActiveState Programmer Network
ActiveState
/ Home / Perl / PHP / Python / Tcl / XSLT /
/ Safari / My ASPN /
Cookbooks | Documentation | Mailing Lists | Modules | News Feeds | Products | User Groups


Recent Messages
List Archives
About the List
List Leaders
Subscription Options

View Subscriptions
Help

View by Topic
ActiveState
.NET Framework
Open Source
Perl
PHP
Python
Tcl
Web Services
XML & XSLT

View by Category
Database
General
SOAP
System Administration
Tools
User Interfaces
Web Programming
XML Programming


MyASPN >> Mail Archive >> php-Dev
php-Dev
#27603 [Com]: incorrect appying open_basedir
by dyan at godsasleep dot nl other posts by this author
Apr 28 2004 11:21AM messages near this date
#27603 [NEW]: incorrect appying open_basedir | #27603 [Com]: incorrect appying open_basedir
ID:               27603
 Comment by:       dyan at godsasleep dot nl
 Reported By:      pk at nodex dot ru
 Status:           No Feedback
 Bug Type:         *General Issues
 Operating System: Solaris 9
 PHP Version:      4CVS-2004-03-15
 New Comment:

Same problem here. Platform: Red Hat Linux 8.0 Kernel 2.4.18 running
Apache 1.3.28, MySQL 4.0.15-standard, PHP 4.3.6. Symptoms: seams to
'leak' between different apache childs, clients which visited different
vhosts. It incorrect applies an open_basedir rule to the vhost i'm
visiting. System is running several vhosts, it picks the open_basedir
rule from another vhost i've not even visited. HTTP Client is IE6.0
with latest updates. When I hit 'F5' it immediately leads to the
correct page. I consider this quite an urgent bug since I use this
feature to shield off the web 'namespaces' of my clients.

PHP Configured with following command:

'./configure' '--with-mysql=/etc/mysql'
'--with-apxs=/etc/apache/bin/apxs' '--enable-sockets' '--enable-imap'
'--with-openssl' '--with-zlib' '--with-gd' '--with-png-dir'
'--enable-ftp' '--with-dom' '--with-freetype' '--with-gif'
'--with-jpeg-dir'

Sample httpd.conf Virtual host:

<VirtualHost *> 
    ServerName www.viktor-rolf.nl
    ServerAlias www.viktor-rolf.nl viktor-rolf.nl
    DocumentRoot /http/viktor-rolf.nl/
    ServerAdmin info@[...].nl
    ErrorLog /var/log/apache/viktor-rolf.nl/error_log
    CustomLog /var/log/apache/viktor-rolf.nl/access_log combined
    AddType application/x-httpd-php .php
    AddType application/x-httpd-php-source .phps

    php_admin_value open_basedir /http/viktor-rolf.nl
</VirtualHost> 


Previous Comments:
------------------------------------------------------------------------

[2004-04-26 06:27:47] russell at flora dot ca

I just upgraded a server to FedoraCore1 from RedHat 8.0 and observed
this problem.  It doesn't happen with all requests. This is the update
RPM php-4.3.4-1.1


Warning: Unknown(): open_basedir restriction in effect.
File(/home/greenfyre/greenfyre.org/phpBB2/index.php) is not within the
allowed path(s): (/home/perc/www/v2) in Unknown on line 0

The directory /home/greenfyre/greenfyre.org/ is the document root of
the virtual server that I made a request from, and /home/perc/www/v2 is
the document root of a different virtual server on the same host (which
is more popular).

This is not a custom compilation of php, but just installing the RPMs
from the updates to Fedora Core.  I have this same RPM on other
machines, so this is a bug that is tweaked by some unique configuration
file for this machine that is different than other machines.

PHPInfo can be seen at:
  http://pookey.perc.ca/phpinfo.php

------------------------------------------------------------------------

[2004-04-13 17:06:45] vaplu at webziek dot nl

Apache/1.3.29
PHP/4.3.4 
Debian/2.4.20-grsec

Warning: Unknown(): open_basedir restriction in effect. File(<file> ) is
not within the allowed path(s): (<path> ) in Unknown on line 0

'./configure' '--with-apxs=/var/www/bin/apxs' '--with-pear'
'--with-openssl' '--with-zlib' '--with-bz2' '--enable-calendar'
'--with-jpeg' '--with-jpeg-dir=/usr' '--with-tiff'
'--with-tiff-dir=/usr' '--with-t1lib=/usr' '--enable-ftp' '--with-gd'
'--with-png' '--with-png-dir=/usr' '--with-freetype'
'--with-freetype-dir=/usr' '--enable-gd-native-ttf' '--with-ming'
'--with-mysql=/usr' '--with-pdflib' '--enable-sockets'
'--enable-sysvmsg' '--enable-sysvsem' '--enable-sysvshm'
'--enable-xslt' '--with-xslt-sablot' '--enable-memory-limit'
'--enable-sysvipc' '--with-iconv' '--enable-shmop' '--enable-trans-sid'


Funny detail is that <file>  has nothing to do with <path>, the
directory of the virtualhost where the <file>  is in, has no relations
to the virtualhost of <path> .

------------------------------------------------------------------------

[2004-04-04 09:46:15] sniper@[...].net

No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.



------------------------------------------------------------------------

[2004-03-28 19:51:40] iliaa@[...].net

Please try using this CVS snapshot:

  http://snaps.php.net/php4-STABLE-latest.tar.gz
 
For Windows:
 
  http://snaps.php.net/win32/php4-win32-STABLE-latest.zip



------------------------------------------------------------------------

[2004-03-24 04:55:59] mak123 at poczta dot onet dot pl

the same problem

PHP 4.3.4
Apache 1.3.29
linux 2.4.20, RH9

PHP Warning: Unknown(): open_basedir restriction in effect.
File(<file> ) is not within the allowed path(s): (<restriction>) in
Unknown on line 0


every virtual in httpd.conf has only one entry (no .htaccess files):
php_admin_value open_basedir


PHP config: './configure' '--with-config-file-path=/etc'
'--with-apache=../apache_1.3.29' '--enable-force-cgi-redirect'
'--enable-discard-path' '--enable-safe-mode' '--with-exec-dir'
'--with-zlib' '--with-jpeg' '--with-jpeg-dir=/usr/local/libjpeg'
'--with-gd' '--with-mysql=/usr/local/mysql'
'--with-mysql-sock=/tmp/mysql.sock' '--with-regex=php'
'--with-openssl=/usr/local/ssl' '--with-gettext' '--with-xml'
'--with-imap=../imap-2002d' '--disable-ipv6' '--with-db4'
'--enable-exif' '--enable-ftp' '--enable-mcrypt'

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/27603

-- 
Edit this bug report at http://bugs.php.net/?id=27603&edit=1
Thread:
pk at nodex dot ru
dyan at godsasleep dot nl
russell at flora dot ca
vaplu at webziek dot nl


mak123 at poczta dot onet dot pl
pk at nodex dot ru

pk at nodex dot ru

pk at nodex dot ru
pk at nodex dot ru


Privacy Policy | Email Opt-out | Feedback | Syndication
© ActiveState Software Inc. All rights reserved