#22368 [NEW]: safe mode on allows users to include (read) system files

From: phpspam at overclockersclub dot com Operating system: Red Hat 7.2 Linux PHP version: 4.3.1 PHP Bug Type: PHP options/info functions Bug description: safe mode on allows users to include (read) system files Safe Mode appears to be on, it says its on for local and master via phpinfo() script. I can virtual include /etc/passwd and it will shows the contents of the file. However, "some" function appear to be blocked by safe mode. -- Edit bug report at http://bugs.php.net/?id=22368&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=22368&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=22368&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=22368&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=22368&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=22368&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=22368&r=support Expected behavior: http://bugs.php.net/fix.php?id=22368&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=22368&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=22368&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=22368&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=22368&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=22368&r=dst IIS Stability: http://bugs.php.net/fix.php?id=22368&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=22368&r=gnused