Why does CURLOPT_FOLLOWLOCATION require open_basedir to be turned off?
| From: | Alex S Kurilo | Date: | Sun, 13 Dec 2009 13:18:49 +0000 |
| Subject: | Why does CURLOPT_FOLLOWLOCATION require open_basedir to be turned off? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-300454@lists.php.net to get a copy of this message | ||
I was wondering why CURLOPT_FOLLOWLOCATION requires open_basedir and safe_mode to be turned off.
The following was found in the changelog(http://www.php.net/ChangeLog-5.php):
Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled. (Stefan E., Ilia)
Also I read some forum posts about security restrictions blah-blah but didn't find anything specific, unfortunately.
Can anybody explain the reasons of such a strange restriction or tell what security issues raises CURLOPT_FOLLOWLOCATION when open_basedir is set?