Re: PHP Safe Mode Filesystem Circumvention Problem (fwd)
| From: | Mats Lindh | Date: | Tue, 05 Feb 2002 22:00:55 +0000 |
| Subject: | Re: PHP Safe Mode Filesystem Circumvention Problem (fwd) | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-79284@lists.php.net to get a copy of this message | ||
- %jflemer@acm.jhu.edu% (James E. Flemer):
> This patch I think will catch all cases, unless there is
> some way that mysql can escape characters (\x44 or
> something).
As far as i can see, this patch will disable all LOAD DATA-cases, this
will however disable a feature in MySQL for loading files that resides
ON the server. There is no reason why this shouldnt be allowed if PHP
is running in safe mode.
LOAD DATA INFILE LOCAL .. the LOCAL part is the problem. I'd guess
that just extending it to handle this would solve the problem.
--
mats