Re: Re: Safe Mode & open_basedir

From: Date: Thu, 08 Aug 2002 07:42:39 +0000
Subject: Re: Re: Safe Mode & open_basedir
References: 1 2  Groups: php.dev 
Request: Send a blank email to php-dev+get-86625@lists.php.net to get a copy of this message
Hi, > BTW, there should be many functions that do not check > safe_mode/open_basedir. With 1 minuite search, I fixed(added) > sevral open_basedir checks recently. sofemode/open_basedir > can be bypassed easily. We don't have to put more effort for > barely working solution... Your open_basedir/safe_mode patches were completely bogus because the streams check open_basedir and safe_mode themself. And it is not true that safe_mode is a barely working solution. The only problem is that php has no control over 3rd party libs that allow access to other files. Stefan Esser

« previous php.dev (#86625) next »