ID: 33723 Updated by: [EMAIL PROTECTED] Reported By: ezmlm at mail dot ru -Status: Critical +Status: Closed Bug Type: Apache related Operating System: Linux PHP Version: 5CVS-2005-07-18 -Assigned To: +Assigned To: dmitry New Comment:
Fixed in CVS HEAD and PHP_5_0. Previous Comments: ------------------------------------------------------------------------ [2005-07-21 00:09:12] [EMAIL PROTECTED] Note: PHP 4.4.0 works fine, this only happens with PHP 5. ------------------------------------------------------------------------ [2005-07-20 23:52:54] [EMAIL PROTECTED] Verified: This only happens with Apache 1.3.x. ------------------------------------------------------------------------ [2005-07-16 13:22:11] ezmlm at mail dot ru Description: ------------ PHP5 for apache 1.3.33 built as DSO allows php_admin_value (php_admin_flag) options marked as PHP_INI_SYSTEM to be reset in .htaccess files by using php_value (php_flag). safe_mode for example. To demonstrate the problem in php.ini set safe_mode = Off, in httpd.conf, set: php_admin_value safe_mode on Get phpinfo to verify that safe_mode is on. Now create .htaccess file in document_root containing: php_flag safe_mode off (or even php_flag safe_mode on) Get phpinfo again and note that safe_mode was reset to off (php.ini initial value) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=33723&edit=1
