PHP 4.0 Bug #7187: open_basedir is broken! Security alert!
| From: | dron at usa dot net | Date: | Fri, 13 Oct 2000 15:52:51 +0000 |
| Subject: | PHP 4.0 Bug #7187: open_basedir is broken! Security alert! | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-34925@lists.php.net to get a copy of this message | ||
From: dron@usa.net
Operating system: Linux 2.0.38 libc5
PHP version: 4.0.3
PHP Bug Type: PHP options/info functions
Bug description: open_basedir is broken! Security alert!
open_basedir is broken in 4.03 release!!! It is not working like in 4.02..
I used
php_value open_basedir '.'
in 4.02 to restrict some virtual servers in apache to access external files, but after upgrading to
version 4.03 it is allow to access any file in filesystem.
Running apache 1.3.12 and php as a dynamic module.
Any hotfix?
--
Edit Bug report at: http://bugs.php.net/?id=7187&edit=1