Re: Re: Safe Mode & open_basedir
| From: | Yasuo Ohgaki | Date: | Thu, 08 Aug 2002 12:54:51 +0000 |
| Subject: | Re: Re: Safe Mode & open_basedir | ||
| References: | 1 2 3 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-86648@lists.php.net to get a copy of this message | ||
Yasuo Ohgaki wrote:
Wez Furlong wrote:One more question. There are 2 reasons why I thought streams does not check open_basedir. 1) I must have had typo in grep 2) I don't see option to check open_basedir While safe_mode check flag is passed, but I don't see any flag for open_basedir. I thoguht you made safe_mode check optoinal, since some internal functions do not need safe_mode check at all. Since there is no option for open_basedir, I thought it is not checked. Why didn't you make open_basedir check optional? Just curious. -- Yasuo OhgakiOn 08/08/02, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:I must had typo when I grepped code. I see where it's checked now :)All the wrappers are (or were when I added streams!) using streams when they open files, so the answer to your question is yes.Your open_basedir/safe_mode patches were completely bogus because the streams check open_basedir and safe_mode themself.I'm well aware of streams is checking safe mode. Are you sure all wrappers are checking open_basedir, too? Then we can get rid of some open_basedir checks.