Re: safe_mode and inclusion of files don't work as documented

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Lars Torben Wilson ha scritto:
> 2009/8/28 Nico Sabbi <nsabbi@xxxxxxxxxxxxxxxxxxx>:
>   
>> Hi,
>> I'm testing one of my sites in safe_mode, but I'm experiencing some
>> strangeness that is not documented.
>>
>> The settings are:
>> in php.ini:
>> include_path =
>> ".:/server/home/apache/php4/:/var/php/5.2/pear/:/usr/php/lib/ezcomponents-2008.2.2/"
>>
>> in the virtualhost config:
>>        php_admin_value safe_mode On
>>        php_admin_value safe_mode_include_dir
>> "/server/home/nsabbi:/server/home/apache/php4:.:.."
>>
>> The files belong entirely to apache:apache, the user who is running apache.
>> The problem is:
>>
>>
>> *Fatal error*: require_once() [function.require
>> <http://nsabbi/login/function.require>]: Failed opening required
>> '../include.php'
>> (include_path='.:..:/server/home/apache/php4/:/var/php/5.2/pear/:/usr/php/lib/ezcomponents-2008.2.2/')
>> in */server/home/nsabbi/nb4/login/index.php* on line *3
>>
>> How is it that i can't include files in .. ????
>>     
>
> Hi Nico,
>
> First the obligatory "safe_mode is deprecated and not recommended"
> speech. . .but I guess you've already seen that in the docs and
> decided to use it anyway.
>
> What does the script do if you turn off safe_mode?
>
>   
>> btw, can I redefine the include_path in safe mode?
>>     
>
> Yes.
>
>   
>> Thanks,
>>  Nico
>>     
>
>
> Regards,
>
> Torben
>   

one more clue, hopefully; the OS is OpenSolaris.

apache@sviluppo2: /server/home/nsabbi/nb4 $ ps -ef|grep httpd
  apache 26840 25190   0 12:54:05 ?           0:09
/usr/apache2/2.2/bin/httpd -k start
  apache 26842 25190   0 12:58:09 ?           0:21
/usr/apache2/2.2/bin/httpd -k start
    root 25190     1   0   Aug 28 ?           2:27
/usr/apache2/2.2/bin/httpd -k start
  apache 25191 25190   0   Aug 28 ?           0:00
/usr/apache2/2.2/bin/httpd -k start
  apache 26844 25190   0 13:00:54 ?           0:21
/usr/apache2/2.2/bin/httpd -k start
  apache 26864 25190   0 13:05:37 ?           0:01
/usr/apache2/2.2/bin/httpd -k start
  apache 26890 26872   0 13:11:25 pts/1       0:00 grep httpd
  apache 26865 25190   0 13:07:24 ?           0:01
/usr/apache2/2.2/bin/httpd -k start
  apache 26821 25190   0 12:51:08 ?           0:24
/usr/apache2/2.2/bin/httpd -k start
  apache 26845 25190   0 13:01:44 ?           0:02
/usr/apache2/2.2/bin/httpd -k start
  apache 26789 25190   0 12:37:25 ?           0:27
/usr/apache2/2.2/bin/httpd -k start
  apache 26863 25190   0 13:04:18 ?           0:01
/usr/apache2/2.2/bin/httpd -k start
  apache 26846 25190   0 13:01:45 ?           0:11
/usr/apache2/2.2/bin/httpd -k start


*Warning*: require_once() [function.require-once
<http://nsabbi/login/function.require-once>]: SAFE MODE Restriction in
effect. The script whose uid is 1 is not allowed to access
../include.php owned by uid 48 in
*/server/home/nsabbi/nb4/login/index.php* on line *3*

*Warning*: require_once(../include.php) [function.require-once
<http://nsabbi/login/function.require-once>]: failed to open stream: No
such file or directory in */server/home/nsabbi/nb4/login/index.php* on
line *3*

*Fatal error*: require_once() [function.require
<http://nsabbi/login/function.require>]: Failed opening required
'../include.php'
(include_path='.:/server/home/apache/php4/:/var/php/5.2/pear/') in
*/server/home/nsabbi/nb4/login/index.php* on line *3*



why is php using uid 1?? It's as if the parent httpd were serving the
page itself, or not?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux