realpath calls being blocked by open_basedir

[iainhallam]

I've installed Combo on a DokuWiki installation on a shared host, in path /srv/<domain>/public/htdocs, and the DokuWiki error log is showing huge numbers of errors emanating from Combo's use of the realpath() function, which is being blocked by the server's open_basedir directive. It's set in the Apache configuration:

php_admin_value open_basedir /srv/<domain>/public/:/srv/<domain>/php_tmp/:/srv/<domain>/php_sessions/

The Twig project ran into this, and they considered introducing a different canonicalisation mechanism from realpath but I don't know whether they've moved forward with that at all. Their analysis was that realpath() was checking to see whether each component of the path existed, which it wasn't allowed to do outside the open_basedir paths, so they thought about simply doing path manipulation without checking the filesystem when configured that way: twigphp/Twig#2709.

Is there anything I can do to get Combo working in my DokuWiki without errors?

[gerardnico]

It’s used to normalise the path

once line 143
https://github.com/ComboStrap/combo/blob/main/ComboStrap/LocalPath.php

I have no idea why you would block that.

[gerardnico]

Technically, it means that open base dir is too restrictive.

https://www.php.net/manual/en/ini.core.php#ini.open-basedir

I’m not sure that you can go around the restrictions by code. You just don’t have access.

What error did you get?

[gerardnico]

Hallo? I thought my mail didn't work. Hopefully, you get it resolved.