Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

error.php file protections don't work properly with PHP's CGI mode #4

Merged
merged 1 commit into from
Dec 16, 2015
Merged

error.php file protections don't work properly with PHP's CGI mode #4

merged 1 commit into from
Dec 16, 2015

Conversation

Joey3000
Copy link
Contributor

See http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=27641 for information.

This fix will affect a newly created /logs/error.php file. With an already existing file: either manually add such an empty comment line to it, or delete the file for it to be re-created with such a line.

See http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=27641 for information.

This fix will affect a newly created /logs/error.php file. With an already existing file: either manually add such an empty comment line to it, or delete the file for it to be re-created with such a line.
@Joey3000
Copy link
Contributor Author

Quote from the above joomlacode.org bug tracker:

The protected added to the error log file appear to be ignored due to a bug in PHP's CGI binary. This effectively causes it not to function properly.

Likely impacted PHP versions:

  • PHP 5.2
  • PHP 5.3

Impacted Joomla! versions:

  • CMS 1.5, 1.6, 1.7 and 2.5 Betas
  • All Platform releases

Related Reading:

Joomla! Platform Pull Request:
joomla/joomla-platform#721

JBS Mailing List discussion thread:
http://groups.google.com/group/joomlabugsquad/browse_thread/thread/61d2a0979c55b418/908f7fcaee6a723d

PHP Bug:
https://bugs.php.net/bug.php?id=60677

@PhilETaylor
Copy link
Owner

Joomla 1.5.999 is no longer under development or supported - the only fixes being merged to this repo are those concerned with security - and I feel this one should be.

PhilETaylor added a commit that referenced this pull request Dec 16, 2015
error.php file protections don't work properly with PHP's CGI mode
@PhilETaylor PhilETaylor merged commit 09f296b into PhilETaylor:master Dec 16, 2015
@Joey3000 Joey3000 deleted the error-log-protection branch December 16, 2015 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants