'php pyrus.phar' won't get executed 'php pyrus.phar' won't get executed php php

'php pyrus.phar' won't get executed


Found it :)

It seems Debian will install a PHP version with the Suhosin patch. My own output of php -v will show the following:

web01:/home/berry# php -vPHP 5.3.5-1 with Suhosin-Patch (cli) (built: Feb 19 2011 01:57:59) Copyright (c) 1997-2009 The PHP GroupZend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies    with Suhosin v0.9.32.1, Copyright (c) 2007-2010, by SektionEins GmbH

Now, it seems Suhosin causes this issue: it doesn't allow the phar file to be executed. If you look in /var/log/user.log, you should see an entry as follows:

web01:/home/berry# tail /var/log/user.log | grep pyrusMar 23 11:27:50 web01 suhosin[17463]: ALERT - Include filename ('phar:///home/berry/pyrus.phar/PEAR2_Pyrus-2.0.0a2/php/PEAR2/Pyrus/ScriptFrontend/Commands.php') is an URL that is not allowed (attacker 'REMOTE_ADDR not set', file '/home/berry/pyrus.phar', line 40)

Since we're executing this only on cli, adding the line below to /etc/php5/cli/conf.d/phar.ini should fix this issue, it did for me.

suhosin.executor.include.whitelist="phar"

Good luck :)