open_basedir and ".."?
| From: | Thomas -Balu- Walter | Date: | Mon, 23 Sep 2002 16:21:13 +0000 |
| Subject: | open_basedir and ".."? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-117300@lists.php.net to get a copy of this message | ||
I am not sure how open_basedir restricts myself. In fact I have problems
with files that begin with "../".
I can not include those files, and get the following
Warning: open_basedir restriction in effect. File is in wrong directory
in /home/vwww/xxxxx/www/htdocs/conpresso/news/aktuelles/index.php
on line 2
Warning: Unable to access ../_include/const.php in
/home/vwww/xxxxx/www/htdocs/conpresso/news/aktuelles/index.php on line 3
Fatal error: Failed opening required '../_include/const.php'
(include_path='.:/usr/share/pear') in
/home/vwww/xxxxx/www/htdocs/conpresso/news/aktuelles/index.php
on line 3
open_basedir is set to /home/vwww/xxxxx/www/htdocs/, so it should not
hit the "magic border".
Or am I getting something wrong here and PHP only checks the beginning
of each given file/directory-argument and not an absolute path created
by the location of the script + relative one given as argument.
Balu