Re: Bugreports - is it worth it? (or: glob() disclosing file names with open_basedir and safe_mode-restriction)
| From: | George Schlossnagle | Date: | Sun, 25 Jul 2004 15:19:56 +0000 |
| Subject: | Re: Bugreports - is it worth it? (or: glob() disclosing file names with open_basedir and safe_mode-restriction) | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-11551@lists.php.net to get a copy of this message | ||
On Jul 25, 2004, at 11:12 AM, Adam Maccabee Trachtenberg wrote:
On Sun, 25 Jul 2004, Peter Brodersen wrote:Because I can set them On in my script, then go guessing at filenames on the server. GeorgeIf nobody wants to give an answer to the above, my question would still be: Is there any way restricting people from retrieving file names (where open_basedir and safe_mode obviously won't help), besides adding glob to disable_functions in php.ini?Why don't you set display_errors to Off? Or am I missing something?