Re: https://bugs.php.net/bug.php?id=52312
| From: | Pierre Joye | Date: | Wed, 17 Aug 2011 11:14:02 +0000 |
| Subject: | Re: https://bugs.php.net/bug.php?id=52312 | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-54642@lists.php.net to get a copy of this message | ||
On Tue, Aug 16, 2011 at 11:29 PM, Reindl Harald <h.reindl@thelounge.net> wrote:
> Hi
>
> https://bugs.php.net/bug.php?id=52312
>
> does the security-problem in combination with open_basedir only
> occur if there are symlinks created?
>
> * i guess in most secure setups "symlink" is disabled
For what I can see, almost no setup disables the symlink functions in
php, even less in the shell.
> * give us a option to bypass the check in such environments
Well, there are other better ways to control access than relying on
open_basedir. Permissions are on, that's why I would not add special
cases here.
Cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org