Re: include bug in 5.3

From: Date: Mon, 11 Aug 2008 21:41:15 +0000
Subject: Re: include bug in 5.3
References: 1 2 3 4 5 6 7 8 9  Groups: php.internals 
Request: Send a blank email to internals+get-39842@lists.php.net to get a copy of this message
Dmitry Stogov wrote:
This behavior is already implemented in "improved" patch that I sent on Saturday. Thanks. Dmitry.
[snip]
What I mean is: fopen("this_is_not_a_dir_but_a_file/../../../../../../../../etc/passwd", "r"); works because of realpath() and PHP's wrapper.
[snip] Does this change affect code like: include "../file.php"; ? Thanks, Greg

« previous php.internals (#39842) next »