Whissi / realpath_turbo

When PHP's open_basedir restriction is set, PHP disables the realpath cache for security reasons. This may hurt your application performance. The realpath_turbo PHP extension re-enables the realpath cache. Warning: This could be a security problem in your environment! Please read the README for further information.
BSD 2-Clause "Simplified" License
45 stars 13 forks source link

CURLOPT_FOLLOWLOCATION not recognizing correct realpath_turbo.open_basedir #12

Closed campi01 closed 5 years ago

campi01 commented 7 years ago

CURLOPT_FOLLOWLOCATION is not working properly when the open_basedir is set with the realpath_turbo.open_basedir and is throwing a warning:

PHP Warning: curl_setopt(): CURLOPT_FOLLOWLOCATION cannot be activated when an open_basedir is set in . . .

It works fine with a regular "open_basedir", ie. when realpath_turbo module is disabled.

Whissi commented 7 years ago

Thanks for the report. Can you please show a proof for

It works fine with a regular "open_basedir", ie. when realpath_turbo module is disabled.

In other words I cannot reproduce: cURL doesn't allow CURLOPT_FOLLOWLOCATION option when any open_basedir restriction is set. So this isn't a realpath_turbo issue. I guess it works for you without realpath_turbo because you don't have set any normal open_basedir restriction... but you will see the same warning when you set PHP's default open_basedir directive to any value.

Whissi commented 5 years ago

No response for one year, closing.