Re: Safe Mode & open_basedir

Ilia A. wrote:

While dealing with a client I came across an interesting problem involving safe_mode & open_basedir. It appears that safe_mode checks are given priority over open_basedir if both are enabled. Would it not be better to change the order to make open_basedir overwrite safe_mode, so that an admin on a system with both enabled would still be able to give a user FULL control over their web directory.

IMO, safemode and open_basedir checks should be independent as it is now. BTW, there should be many functions that do not check safe_mode/open_basedir. With 1 minuite search, I fixed(added) sevral open_basedir checks recently. sofemode/open_basedir can be bypassed easily. We don't have to put more effort for barely working solution... -- Yasuo Ohgaki