Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:32365
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain tienshiao.org designates 72.36.141.82 as permitted sender)
Message-ID: <46EFABFE.1070907@tienshiao.org>
Date: Tue, 18 Sep 2007 03:44:14 -0700
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To:  internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: SetEnv PHPRC and Apache CGI redirection
From: tienshiao@tienshiao.org (Tienshiao Ma)

Hi all,

I did a quick search in the bug tracker and the mailing list archives 
and didn't see anything.

It looks like SetEnv PHPRC and Apache CGI redirection are not compatible.

When Apache is configured as indicated at 
http://php.net/security.cgi-bin and as recommended at 
http://www.php.net/manual/en/configure.php#configure.enable-force-cgi-redirect, 
it appears that SetEnv PHPRC cannot be used to specify a php.ini.

SetEnv PHPRC works (and can be seen when tested with a traditional CGI 
script, say written in Perl) but when the request goes to PHP via the 
internal Apache redirect, the PHPRC environmental variable gets 
rewritten as REDIRECT_PHPRC. This is why the CGI SAPI checks for the 
existence of the environmental variable REDIRECT_STATUS if 
"--enable-force-cgi-redirect" is specified.

Would it be reasonable to patch php_ini.c to check REDIRECT_PHPRC if 
FORCE_CGI_REDIRECT is defined? This way both the SetEnv method and the 
shell wrapper exporting PHPRC will work.

I just discovered the problem today, and have only skimmed through the 
php_ini.c code. Doesn't look too difficult to add to the search_path, 
but the ini_filename would probably require some sort of policy decision 
(which has precedence if both PHPRC and REDIRECT_PHPRC exist -- I assume 
PHPRC would).

Curious about how others feel about this issue.


Thanks,


Tienshiao