Re: safe_mode and inclusion of files don't work as documented

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please create a file(.php) and write follow codes for more details.
============================
<?php
phpinfo();
?>
============================

2009/8/31 Nico Sabbi <nsabbi@xxxxxxxxxxxxxxxxxxx>:
> Lars Torben Wilson ha scritto:
>> 2009/8/28 Nico Sabbi <nsabbi@xxxxxxxxxxxxxxxxxxx>:
>>
>>> Hi,
>>> I'm testing one of my sites in safe_mode, but I'm experiencing some
>>> strangeness that is not documented.
>>>
>>> The settings are:
>>> in php.ini:
>>> include_path =
>>> ".:/server/home/apache/php4/:/var/php/5.2/pear/:/usr/php/lib/ezcomponents-2008.2.2/"
>>>
>>> in the virtualhost config:
>>>        php_admin_value safe_mode On
>>>        php_admin_value safe_mode_include_dir
>>> "/server/home/nsabbi:/server/home/apache/php4:.:.."
>>>
>>> The files belong entirely to apache:apache, the user who is running apache.
>>> The problem is:
>>>
>>>
>>> *Fatal error*: require_once() [function.require
>>> <http://nsabbi/login/function.require>]: Failed opening required
>>> '../include.php'
>>> (include_path='.:..:/server/home/apache/php4/:/var/php/5.2/pear/:/usr/php/lib/ezcomponents-2008.2.2/')
>>> in */server/home/nsabbi/nb4/login/index.php* on line *3
>>>
>>> How is it that i can't include files in .. ????
>>>
>>
>> Hi Nico,
>>
>> First the obligatory "safe_mode is deprecated and not recommended"
>> speech. . .but I guess you've already seen that in the docs and
>> decided to use it anyway.
>>
>> What does the script do if you turn off safe_mode?
>>
>>
>>> btw, can I redefine the include_path in safe mode?
>>>
>>
>> Yes.
>>
>>
>>> Thanks,
>>>  Nico
>>>
>>
>>
>> Regards,
>>
>> Torben
>>
>
> one more clue, hopefully; the OS is OpenSolaris.
>
> apache@sviluppo2: /server/home/nsabbi/nb4 $ ps -ef|grep httpd
>  apache 26840 25190   0 12:54:05 ?           0:09
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26842 25190   0 12:58:09 ?           0:21
> /usr/apache2/2.2/bin/httpd -k start
>    root 25190     1   0   Aug 28 ?           2:27
> /usr/apache2/2.2/bin/httpd -k start
>  apache 25191 25190   0   Aug 28 ?           0:00
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26844 25190   0 13:00:54 ?           0:21
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26864 25190   0 13:05:37 ?           0:01
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26890 26872   0 13:11:25 pts/1       0:00 grep httpd
>  apache 26865 25190   0 13:07:24 ?           0:01
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26821 25190   0 12:51:08 ?           0:24
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26845 25190   0 13:01:44 ?           0:02
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26789 25190   0 12:37:25 ?           0:27
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26863 25190   0 13:04:18 ?           0:01
> /usr/apache2/2.2/bin/httpd -k start
>  apache 26846 25190   0 13:01:45 ?           0:11
> /usr/apache2/2.2/bin/httpd -k start
>
>
> *Warning*: require_once() [function.require-once
> <http://nsabbi/login/function.require-once>]: SAFE MODE Restriction in
> effect. The script whose uid is 1 is not allowed to access
> ../include.php owned by uid 48 in
> */server/home/nsabbi/nb4/login/index.php* on line *3*
>
> *Warning*: require_once(../include.php) [function.require-once
> <http://nsabbi/login/function.require-once>]: failed to open stream: No
> such file or directory in */server/home/nsabbi/nb4/login/index.php* on
> line *3*
>
> *Fatal error*: require_once() [function.require
> <http://nsabbi/login/function.require>]: Failed opening required
> '../include.php'
> (include_path='.:/server/home/apache/php4/:/var/php/5.2/pear/') in
> */server/home/nsabbi/nb4/login/index.php* on line *3*
>
>
>
> why is php using uid 1?? It's as if the parent httpd were serving the
> page itself, or not?
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux