#24515 [Opn->Fbk]: $_SERVER[remote_addr] different to $remote_addr

[sniper@php.net]

ID: 24515
Updated by: [email]sniper@php.net[/email]
Reported By: phpbug at easihosting dot co dot uk
-Status: Open
+Status: Feedback
Bug Type: Scripting Engine problem
Operating System: linux
PHP Version: 4.3.3RC1
New Comment:

Which webserver are you using?
What was the configure line used?



Previous Comments:
------------------------------------------------------------------------

[2003-07-07 08:30:40] phpbug at easihosting dot co dot uk

What information do you require? I have read the guidelines, and I seem
to have adeared to them, short, simple and not missing anything out.

Did you not understand my bug report or do you think it is not a bug
but a feature?

Everytime I get a visitor to my site it sends me an email. It is
reporting that they are visiting a different site to what they are.
This other site is also hosted on the same server.

I have not found a way to easily reproduce this, I just have to wait
and read the emails that report both $_SERVER array and registered
global variables.

------------------------------------------------------------------------

[2003-07-06 17:50:44] phpbug at easihosting dot co dot uk

Description:
------------
When register_globals is on one would expect the registered globals to
be the same values as the variables accessed through the global
arrays.

$remote_addr doesn't always return the IP of the visitor to the site
but the IP of another visitor to another site on the same server.

$server_name doesn't always return the host name for the site being
visited, but that of another site being hosted on the same server.

Reproduce code:
---------------
echo '$SERVER_NAME';
echo " ";
echo "$SERVER_NAME";
echo "<br>";

echo '$_SERVER[SERVER_NAME]';
echo " ";
echo "$_SERVER[SERVER_NAME]";
echo "<br>";


Expected result:
----------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.p800.co.uk[/url]

Actual result:
--------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.symbos.co.uk[/url]


------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=24515&edit=1[/url]

[sniper@php.net]

ID: 24515
Updated by: [email]sniper@php.net[/email]
Reported By: phpbug at easihosting dot co dot uk
-Status: Open
+Status: Feedback
Bug Type: Scripting Engine problem
Operating System: linux
PHP Version: 4.3.3RC1
New Comment:

Apache 1.3.6 ?!?! The latest and best version is Apache 1.3.27. There
are couple of security bugs even in that version you use, UPGRADE it
first! (also openssl!)

Also, you use configure options you shouldn't be using:

'--with-regex=system' <-- never use!
'--enable-mm=shared' <-- it's "--with-mm" and it can't be shared.

And these don't even exist:

'--enable-track-vars'
'--enable-mbstr-enc-trans'




Previous Comments:
------------------------------------------------------------------------

[2003-07-10 09:42:45] phpbug at easihosting dot co dot uk

Configure:
'./configure' '--prefix=/usr' '--with-apxs=/usr/sbin/apxs'
'--with-gettext=/usr' '--with-config-file-path=/etc/httpd'
'--with-exec-dir=/usr/bin' '--with-zlib' '--enable-magic-quotes'
'--with-regex=system' '--with-ttf' '--with-db' '--with-gdbm'
'--enable-mbstring' '--enable-mbstr-enc-trans' '--enable-track-vars'
'--with-gd' '--enable-wddx=shared' '--enable-mm=shared' '--enable-xml'
'--enable-ftp' '--disable-debug' '--with-libdir=/usr/lib'
'--with-pgsql=shared' '--with-pdflib=shared' '--with-jpeg-dir=/usr/lib'
'--with-png-dir=/usr/lib' '--enable-inline-optimization'
'--enable-gd-native-ttf' '--with-imap'

Apache/1.3.6 (Unix) PHP/4.3.3RC2-dev mod_perl/1.21 mod_ssl/2.2.8
OpenSSL/0.9.2b

------------------------------------------------------------------------

[2003-07-09 18:14:21] [email]sniper@php.net[/email]

Which webserver are you using?
What was the configure line used?


------------------------------------------------------------------------

[2003-07-07 08:30:40] phpbug at easihosting dot co dot uk

What information do you require? I have read the guidelines, and I seem
to have adeared to them, short, simple and not missing anything out.

Did you not understand my bug report or do you think it is not a bug
but a feature?

Everytime I get a visitor to my site it sends me an email. It is
reporting that they are visiting a different site to what they are.
This other site is also hosted on the same server.

I have not found a way to easily reproduce this, I just have to wait
and read the emails that report both $_SERVER array and registered
global variables.

------------------------------------------------------------------------

[2003-07-06 17:50:44] phpbug at easihosting dot co dot uk

Description:
------------
When register_globals is on one would expect the registered globals to
be the same values as the variables accessed through the global
arrays.

$remote_addr doesn't always return the IP of the visitor to the site
but the IP of another visitor to another site on the same server.

$server_name doesn't always return the host name for the site being
visited, but that of another site being hosted on the same server.

Reproduce code:
---------------
echo '$SERVER_NAME';
echo " ";
echo "$SERVER_NAME";
echo "<br>";

echo '$_SERVER[SERVER_NAME]';
echo " ";
echo "$_SERVER[SERVER_NAME]";
echo "<br>";


Expected result:
----------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.p800.co.uk[/url]

Actual result:
--------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.symbos.co.uk[/url]


------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=24515&edit=1[/url]