Re: include bug in 5.3
| From: | Greg Beaver | Date: | Mon, 11 Aug 2008 21:41:15 +0000 |
| Subject: | Re: include bug in 5.3 | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-39842@lists.php.net to get a copy of this message | ||
Dmitry Stogov wrote:
This behavior is already implemented in "improved" patch that I sent on Saturday. Thanks. Dmitry.[snip]
[snip] Does this change affect code like: include "../file.php"; ? Thanks, GregWhat I mean is: fopen("this_is_not_a_dir_but_a_file/../../../../../../../../etc/passwd", "r"); works because of realpath() and PHP's wrapper.