Public bug reported:

Binary package hint: php5-cgi

Enabling an open_basedir restriction causes bogus warnings to be
emitted.

Testcase (using php-cli):
# /usr/bin/php5 -d open_basedir=/tmp/ -r 'var_dump(file_exists("/tmp/nosuch"));'

Warning: file_exists(): open_basedir restriction in effect. File(/tmp/nosuch) 
is not within the allowed path(s): (/tmp/) in Command line code on line 1
bool(false)

The warning vanishes if you remove the trailing slash of the
open_basedir restriction, but this allows matches like /tmpathon since
it's a simple substring match.

See upstreams http://bugs.php.net/bug.php?id=41518 for more information
and examples.

It's fixed in PHP 5.2.4 according to
http://www.php.net/ChangeLog-5.php#5.2.4 but I haven't been able to find
the patch that fixes it.

** Affects: php5 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
open_basedir restriction causes bogus warnings
https://bugs.launchpad.net/bugs/164386
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to