Re: php3_open_dir not quite restricted
| From: | Marcin Orlowski | Date: | Sun, 17 Sep 2000 20:09:14 +0000 |
| Subject: | Re: php3_open_dir not quite restricted | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-17095@lists.php.net to get a copy of this message | ||
Sunday, September 17, 2000, 1:10:59 AM, php-general@lists.php.net wrote:
Duplicated. Please ignore.
MO> I noticed that even php3_open_dir is specified for particular
MO> virtual host, one can still do e.g. filesize("/etc/passwd").
MO> Shouldn't it be rejected like fopen() is? Do PHP4 behave same
MO> stupid way? If so, how can I work that around? Thanks.
--
Win95: "We made it safe to turn off your computer"
Marcin http://wfmh.org.pl/~carlos/
mailto:carlos@wfmh.org.pl