Bug #7920

go-pear.php: broken temporary directory handling

Details

Submitted	2006-06-16 11:43 UTC
From	neuhauser+pear dot php dot net at sigpipe dot cz
Assigned	pajoye
Status	No Feedback
Package	PEAR
PHP Version	5.1.4
OS	RHEL 4
Roadmaps	(Not assigned)

Comments

[2006-06-16 11:43 UTC] neuhauser+pear dot php dot net at sigpipe dot cz

Description:
------------
Looks like the script at http://go-pear.org cannot be trusted: here it is shown trying to wipe out my /tmp:

roman@buldozer-test ~/install 1021:0 > wget -O go-pear.php http://go-pear.org/
roman@buldozer-test ~/install 1022:0 > sudo php go-pear.php
Welcome to go-pear!

Go-pear will install the 'pear' command and all the files needed by
it. This command is your tool for PEAR installation and maintenance.

Go-pear also lets you download and install the PEAR packages bundled
with PHP: MDB2, Net_Socket, Net_SMTP, Mail, XML_Parser, PHPUnit.

If you wish to abort, press Control-C now, or press Enter to continue:

HTTP proxy (http://user:password@proxy.myhost.com:port), or Enter for none::

Below is a suggested file layout for your new PEAR installation. To
change individual locations, type the number in front of the
directory. Type 'all' to change all of them or simply press Enter to
accept these locations.

1. Installation prefix : /usr/local
2. Binaries directory : $prefix/bin
3. PHP code directory ($php_dir) : $prefix/share/pear
4. Documentation base directory : $php_dir/docs
5. Data base directory : $php_dir/data
6. Tests base directory : $php_dir/tests
7. Temporary files directory :

1-7, 'all' or Enter to continue:

******************************************************************************
FATAL ERROR! We cannot initialize the temp directory. Please be sure to give
full write access to this directory and the install directory.

PHP Warning: rmdir(/tmp/scratch02.26971): Directory not empty in /home/roman/in stall/go-pear.org on line 1175
PHP Warning: rmdir(/tmp/scratch02.26975): Directory not empty in /home/roman/in stall/go-pear.org on line 1175
PHP Warning: rmdir(/tmp/scratch02.26979): Directory not empty in /home/roman/in stall/go-pear.org on line 1175
PHP Warning: rmdir(/tmp/scratch02.26980): Directory not empty in /home/roman/in stall/go-pear.org on line 1175
PHP Warning: rmdir(/tmp): Directory not empty in /home/roman/install/go-pear.or g on line 1175

[2006-06-16 15:06 UTC] neuhauser+pear dot php dot net at sigpipe dot cz

Sorry, but I don't trust the code enough to run it with or without root privileges. (The above was the first, and also the last attempt.)