Re: open_basedir_for_include
| From: | Peter Brodersen | Date: | Sun, 26 Mar 2006 17:34:55 +0000 |
| Subject: | Re: open_basedir_for_include | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-22585@lists.php.net to get a copy of this message | ||
On Sat, 25 Mar 2006 12:14:52 -0500, in php.internals ilia@prohost.org
(Ilia Alshanetsky) wrote:
>Plus is you leave the file writable, what's to say you couldn't do:
>shell_exec("cp foo /lib/file/inc.php") ?
The possible exec restriction salvaged from safe_mode mentioned in
<43874C56.8050007@lerdorf.com> ?
This thread is mainly about a safety net for one's own code. But
regarding restricting users, open_basedir is IMO useless if not backed
up by some other methods (like restricting exec functions).
--
- Peter Brodersen