Re: Bugreports - is it worth it? (or: glob() disclosing file names with open_basedir and safe_mode-restriction)
| From: | Adam Maccabee Trachtenberg | Date: | Sun, 25 Jul 2004 15:12:26 +0000 |
| Subject: | Re: Bugreports - is it worth it? (or: glob() disclosing file names with open_basedir and safe_mode-restriction) | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-11550@lists.php.net to get a copy of this message | ||
On Sun, 25 Jul 2004, Peter Brodersen wrote:
> If nobody wants to give an answer to the above, my question would still be:
> Is there any way restricting people from retrieving file names (where
> open_basedir and safe_mode obviously won't help), besides adding glob to
> disable_functions in php.ini?
Why don't you set display_errors to Off? Or am I missing something?
-adam
--
adam@trachtenberg.com
author of o'reilly's "upgrading to php 5" and "php cookbook"
avoid the holiday rush, buy your copies today!