open_basedir Question
| From: | Aaron Greenspan | Date: | Wed, 27 Jul 2005 04:39:27 +0000 |
| Subject: | open_basedir Question | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-219395@lists.php.net to get a copy of this message | ||
Hi,
Has anyone else had a problem with the open_basedir restriction completely ignoring what you tell it? I've added several directories to my allowed path (separated by colons) in my Apache configuration file, and then when I go to run my scripts, I'm told that /home/sites/site1/web/ and so on is not in my allowed path of /home/sites/site1. Trailing slashes don't change anything. A little weird...
This is on Linux with PHP 4.3.11. Several bugs on bugs.php.net from 2002 reported similar behavior, but I don't think it's really been corrected. If this is a bug, it's a serious one from my perspective, because it means I turn off those restrictions entirely, which makes my entire server less secure.
Thanks,
Aaron
Aaron Greenspan
President & CEO
Think Computer Corporation
http://www.thinkcomputer.com