Re: open_basedir_for_include

From: Date: Sat, 25 Mar 2006 17:14:52 +0000
Subject: Re: open_basedir_for_include
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-22582@lists.php.net to get a copy of this message
Rasmus Lerdorf wrote:
Yes, and in normal circumstances you wouldn't accidentally write to places you aren't supposed to, just like in normal circumstances you will have all your file permissions set correctly. And in normal circumstances you would never have bugs in your code.
Attempts to modify common include files are not very likely to be accidental. It is a bit hard to confuse include() with file_put_contents() ;-) Plus is you leave the file writable, what's to say you couldn't do: shell_exec("cp foo /lib/file/inc.php") ? Ilia

« previous php.internals (#22582) next »