Re: PHP 4.0 Bug #6495: open_basedir has no efect in php.ini
| From: | Rasmus Lerdorf | Date: | Sat, 02 Sep 2000 21:13:11 +0000 |
| Subject: | Re: PHP 4.0 Bug #6495: open_basedir has no efect in php.ini | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-31688@lists.php.net to get a copy of this message | ||
> If I'm not wrong,acording to the php manual,php read php.ini at every
> invocation.Good.
Only for the CGI version.
> Then,again acording the manual when a script tries to open a
> file the location of file is checked(by php I understand) and if it is
> outside the directory-tree specified in the open_basedir directive php will
> refuse to open it.Scuse me but this mechanism don't look to me to depend by
> the operating system or by the filesystem.So,I think is only about php
> behavior.If with the same binary under NT open_basedir work and under win95
> no is strange but I still look for a logic explanation before blaming the
> insecure of win95.
open-basedir is tied to safe-mode which is currently OS-dependant.
-Rasmus