I just ran into this bug, and was rather bewildered by it.
In case it helps for whenever this is reassigned to PHP, here's my experience.

Several boards have been running successfully for years, using both php4 and php5 from Debian's repository, with the auto_prepend method. This worked up until last weekend, when the php5 package was upgraded from 5.1.6-1 to 5.2.0-7. Since then the problem has been consistent, appearing on about 9 out of 10 loads, as previous reports have indicated.

To me it seems the problem is not that random prepend files are selected (I have them set up as one per vhost), but rather that the auto_prepend_file directive is ignored altogether, which makes it fall back to config.php. I could be mistaken of course -- I have not done much analysis of this.

I'd flag this as a security issue, since randomly accessing a different file than what's been explicitly defined can have rather unfortunate consequences.

The HTTP_HOST workaround does work, but as has also previously been noted, is far from ideal.

Hope this is to some help, and merry christmas to whoever reads this.

--
 -==-                  -=-                  -==-
  Christer Mjellem Strand               yitzhaq
  Systems Administrator         www.yitzhaq.net
  GSM +47 922 000 12           www.countzero.no
 -==-                  -=-                  -==-


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to