#41655 [Asn->Csd]: open_basedir bypass via glob()
| From: | iliaa@php.net | Date: | Tue, 12 Jun 2007 12:57:50 +0000 |
| Subject: | #41655 [Asn->Csd]: open_basedir bypass via glob() | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-113703@lists.php.net to get a copy of this message | ||
ID: 41655
Updated by: iliaa@php.net
Reported By: dr at peytz dot dk
-Status: Assigned
+Status: Closed
Bug Type: Safe Mode/open_basedir
Operating System: Linux
PHP Version: 5.2.3
Assigned To: iliaa
New Comment:
This bug has been fixed in CVS.
Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
Thank you for the report, and for helping us make PHP better.
Previous Comments:
------------------------------------------------------------------------
[2007-06-11 17:14:02] dr at peytz dot dk
Description:
------------
file_exists() etc. does not allow checking the existence of files
outside the directories specified in open_basedir.
This can be circumvented using glob(). glob() does check open_basedir,
but its return type still reveals whether files exist outside
open_basedir. The existence of a file can be checked using
!is_array(glob($filename)).
Reproduce code:
---------------
var_dump(glob('/etc/hosts'));
var_dump(glob('/etc/does-not-exist'));
Expected result:
----------------
bool(false)
bool(false)
or
array(0) {
}
array(0) {
}
Actual result:
--------------
bool(false)
array(0) {
}
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=41655&edit=1