Bug #1713 Updated: copy() function allows copy files from anywhere in filesystem
| From: | Bug Database | Date: | Mon, 19 Jul 1999 12:09:16 +0000 |
| Subject: | Bug #1713 Updated: copy() function allows copy files from anywhere in filesystem | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-8711@lists.php.net to get a copy of this message | ||
ID: 1713
User Update by: tecnica@microlink.com.br
Status: Open
Old-Bug Type: Other
Bug Type: Feature/Change Request
Description: copy() function allows copy files from anywhere in filesystem
It's occurs only if the php source has the same user Id of the copy from file.
For security purposes I think that some directive like work_basedir
can be added in future versions to prevent mistakes that open the
server filesystem root or the user local dirs.
Full Bug description available at: http://bugs.php.net/?id=1713