#24775 [Opn->Csd]: safe_mode, include, safe_mode_include_dir
ID: 24775
Updated by: iliaa@php.net
Reported By: drg at infomex dot pl
-Status: Open
+Status: Closed
Bug Type: Scripting Engine problem
Operating System: Linux 2.4.20
PHP Version: 4.3.2
New Comment:
This bug has been fixed in CVS.
In case this was a PHP problem, snapshots of the sources are packaged
every three hours; this change will be in the next snapshot. You can
grab the snapshot at http://snaps.php.net/.
In case this was a documentation problem, the fix will show up soon at
http://www.php.net/manual/.
In case this was a PHP.net website problem, the change will show
up on the PHP.net site and on the mirror sites in short time.
Thank you for the report, and for helping us make PHP better.
Previous Comments:
------------------------------------------------------------------------
[2003-07-23 14:13:53] drg at infomex dot pl
Description:
------------
When:
safe_mode=On
safe_mode_include_dir=
fp=fopen("/file/not/owned/be/me") fail, but
include("/file/not/owned/be/me") work fine.
When:
safe_mode=On
safe_mode_include_dir=/tmp (examply)
then
include("/file/not/owned/be/me") fail.
I think, that when safe_mode=On and safe_mode_include_dir is not set,
include("/file/not/owned/be/me") should fail too, as well as
fopen("/file/not/owned/be/me");
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=24775&edit=1
Thread (2 messages)