php-cgi returns "No input file" when document root contains .. path elements

cuongphphanoi / mongoose

Automatically exported from code.google.com/p/mongoose

MIT License

0 stars 0 forks source link

php-cgi returns "No input file" when document root contains .. path elements #242

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago

./mongoose -I `which php5-cgi` -r /tmp/foo/../project

This will call php5-cgi with an env of:

export SERVER_ROOT="/tmp/project"
export SCRIPT_FILENAME="/tmp/foo/../project/index.php"
export PATH_TRANSLATED="/tmp/foo/../project/index.php"

PHP seems to do some very simple path checking, whether the script is within 
SERVER_ROOT, and misses the fact that it is.

This is using the current tip (163:7d1dd26a81be) and PHP 5.3.3.

Original issue reported on code.google.com by elsdoer...@gmail.com on 27 Mar 2011 at 10:01

GoogleCodeExporter commented 9 years ago

Is this the same issue as 136?
I'm having the same problem.

Original comment by lieven.r...@gmail.com on 20 May 2011 at 8:26

GoogleCodeExporter commented 9 years ago

Original comment by valenok on 22 Jun 2011 at 7:45

Changed state: Accepted
Added labels: Priority-High
Removed labels: Priority-Medium

GoogleCodeExporter commented 9 years ago

Can't reproduce on the latest code, https://github.com/valenok/mongoose.git
Could you verify it is not a problem anymore please?

Original comment by valenok on 22 Sep 2012 at 2:26

Changed state: Fixed