Opened 14 years ago

Last modified 10 years ago

#2 reopened defect

php.d and php.ini have bad interactions

Reported by: broder Owned by:
Priority: minor Milestone:
Component: web Keywords:
Cc:

Description (last modified by broder)

If you create a php.ini file, even an empty one, magic_quotes_gpc gets enabled for all PHP scripts in that directory. This is likely to subtly break things.

Ticket taken from RT #435361

Change History (6)

comment:1 Changed 14 years ago by broder

If you create a php.ini file, even an empty one, magic_quotes_gpc gets enabled for all PHP scripts in that directory. This is likely to subtly break things.

The other changes, according to phpinfo(), are:

Configuration File (php.ini) Path: /etc/php.ini -> /afs/athena.mit.edu/user/a/n/andersk/web_scripts/php.ini allow_call_time_pass_reference: Off -> On error_reporting: 2047 -> no value log_errors: On -> Off magic_quotes_gpc: Off -> On max_input_time: 60 -> -1 output_buffering: 4096 -> 0 register_argc_argv: Off -> On register_long_arrays: Off -> On safe_mode_exec_dir: no value -> /usr/bin sendmail_path: "/usr/sbin/sendmail -t -i" -> "/usr/sbin/sendmail -t -i " session.bug_compat_42: Off -> On session.gc_divisor: 1000 -> 100 session.hash_bits_per_character: 5 -> 4 url_rewriter.tags: a=href,area=href,frame=src,input=src,form=fakeentry -> a=href,area=href,frame=src,form=,fieldset=

Anders

comment:2 Changed 14 years ago by broder

Here's a related annoying problem: it is impossible to override anything set in /etc/php.d/*.ini with ./php.ini. This includes the include_path option, which people would definitely like to be able to override (#433633 for example).

I suspect that the right solution will fix both of these problems. But I haven't yet figured out what that is.

Anders

comment:3 Changed 14 years ago by broder

  • Description modified (diff)

comment:4 Changed 14 years ago by broder

  • Description modified (diff)

comment:5 Changed 10 years ago by ezyang

  • Resolution set to wontfix
  • Status changed from new to closed

#172 offers a nice way of "fixing" (i.e. not doing) this, so I'm going to WONTFIX this.

comment:6 Changed 10 years ago by andersk

  • Resolution wontfix deleted
  • Status changed from closed to reopened

I’m going to reopen this until we actually solve #172, because I’m not sure it’s quite as trivial as you imagine (in particular, .user.ini doesn’t seem to let you load extensions).

Note: See TracTickets for help on using tickets.