php-cgi returns "No input file" when document root contains .. path elements

[GoogleCodeExporter]

./mongoose -I `which php5-cgi` -r /tmp/foo/../project

This will call php5-cgi with an env of:

export SERVER_ROOT="/tmp/project"
export SCRIPT_FILENAME="/tmp/foo/../project/index.php"
export PATH_TRANSLATED="/tmp/foo/../project/index.php"

PHP seems to do some very simple path checking, whether the script is within 
SERVER_ROOT, and misses the fact that it is.

This is using the current tip (163:7d1dd26a81be) and PHP 5.3.3.

Original issue reported on code.google.com by elsdoer...@gmail.com on 27 Mar 2011 at 10:01

[GoogleCodeExporter]

Is this the same issue as 136?
I'm having the same problem.

Original comment by lieven.r...@gmail.com on 20 May 2011 at 8:26

[GoogleCodeExporter]

Original comment by valenok on 22 Jun 2011 at 7:45

• Changed state: Accepted
• Added labels: Priority-High
• Removed labels: Priority-Medium

[GoogleCodeExporter]

Can't reproduce on the latest code, https://github.com/valenok/mongoose.git
Could you verify it is not a problem anymore please?

Original comment by valenok on 22 Sep 2012 at 2:26

• Changed state: Fixed