Re: Re: Safe Mode & open_basedir

From: Date: Thu, 08 Aug 2002 12:24:40 +0000
Subject: Re: Re: Safe Mode & open_basedir
References: 1 2  Groups: php.dev 
Request: Send a blank email to php-dev+get-86643@lists.php.net to get a copy of this message
Wez Furlong wrote:
On 08/08/02, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:
Your open_basedir/safe_mode patches were completely bogus because the streams check open_basedir and safe_mode themself.
I'm well aware of streams is checking safe mode. Are you sure all wrappers are checking open_basedir, too? Then we can get rid of some open_basedir checks.
All the wrappers are (or were when I added streams!) using streams when they open files, so the answer to your question is yes.
I must had typo when I grepped code. I see where it's checked now :)
However, code that uses other means of opening files are not automatically safe_mode aware.
Sounds reasonable. -- Yasuo Ohgaki

« previous php.dev (#86643) next »