Re: Re: Safe Mode & open_basedir
| From: | Stefan Esser | Date: | Thu, 08 Aug 2002 07:42:39 +0000 |
| Subject: | Re: Re: Safe Mode & open_basedir | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-86625@lists.php.net to get a copy of this message | ||
Hi,
> BTW, there should be many functions that do not check
> safe_mode/open_basedir. With 1 minuite search, I fixed(added)
> sevral open_basedir checks recently. sofemode/open_basedir
> can be bypassed easily. We don't have to put more effort for
> barely working solution...
Your open_basedir/safe_mode patches were completely bogus
because the streams check open_basedir and safe_mode themself.
And it is not true that safe_mode is a barely working solution.
The only problem is that php has no control over 3rd party libs that
allow access to other files.
Stefan Esser