WP_Http won't follow redirects if open_basedir is in effect

[calin]

None of the existing transport methods (tested with all methods) follow the location header if PHP setting open_basedir is in effect. This further affects the SimplePie RSS, triggering errors for redirected feeds with the error: A feed could not be found at ​http://thebl.og/feed/ in /wp-includes/class-simplepie.php on line 1680.

[Denis-de-Bernardy]

Isn't open_basedir supposed to go away with php6?

[calin]

I attached the patch to fix the issue.

[dd32]

This doesnt affect all transports.

Specifically, This affects Curl only, When Running under safe mode, or when open_basedir is set - ​http://core.trac.wordpress.org/browser/trunk/wp-includes/http.php#L1329 redirection is specifically disabled in the event of either.

I dont think the proposed location in the patch is the best place for it. Patch forthcoming which moves this check into the Curl handler and only activates if Follow location was disabled.

[dd32]

This doesnt affect all transports.

Although i've said that, I realise that the OP has stated that it does..

I've tested all the transports aside from the PHP HTTP Extension, and they all seem to play ball with the attached patch.. Taking into account #11557 & the fact that the Fsockopen transport also manually follows redirects.. The original statement didnt seem correct to me.

[dd32]

Updated patch based on Fsockopen's syntax, to keep the logic constant throughout the file.

[dd32]

Closed #10417 as Duplicate of this.

According to Sivel on that ticket:

When safe_mode or open_basedir are set it seems that the only transport that can "follow" the redirects is fsockopen. All others stop after the initial request.

So it could potentially just be my system that Streams and Fopen are following the redirects.. Can someone else confirm that?

[hakre]

your redirect test-script would be really helpfull for this ticket as well :)

[dd32]

your redirect test-script would be really helpfull for this ticket as well :)

​http://tools.dd32.id.au/redirect/

[dd32]

(In [12747]) Allow cURL to follow redirects when running under safe_mode or open_basedir. See #11305

[dd32]

I commited the changes that affect curl.

Could someone please report under what specific conditions streams/fopen are affected?

PHP Version, and possibly a print of phpinfo() could be very useful.

[dd32]

(In [12749]) Fix Typo in r12747, Move cURL Redirection check higher. See #11305

[dd32]

Closing as fixed due to lack of feedback. If other transports are affected, please open a new ticket with full system information and reference this ticket.

[hakre]

Related: #16889

[hakre]

Related: #16890

[cogmios]

see my comment on this in #16855 when redirect = 0