Re: new security related directive for php-4.3.4

> No new features are being accepted into the 4.3.X tree, only bug fixes. > The patch itself seems to duplicate the open_basedir functionality anyway. > > Ilia Its not really duplicating anyting in open_basedir. As a metter of fact it is meant to be used together with open_basedir for best results. ISP and people doin mass hosting would mainly benefit from that patch. For example if I had all my domains hosted in /home then setting /home in open_basedir will not let customers get out of /home, but they would still be able to read each others documents. php scripts in /home/domain1.com could still read files located in /home/domain2.com , so in other words setting open_basedir = /home wont prevent users locate inside /home from snooping on each others data. thats the main reason why I wrote that patch. As for "No new features are being accepted into the 4.3.X tree" I can create a patch for testing for any other php tree if needed. Cheers, Boulat. > > On March 19, 2004 12:48 pm, boulat@funio.com wrote: >> Hi internals, >> >> I added "virtual_root_level" new security related directive >> into php-4.3.4. >> >> Full description with the patch can be found in here >> >> http://www.boulat.net/projects/virtual_root_level/ >> >> Some feedback/comments would be appreciated. >> >> Regards, >> Boulat > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > > Delete & Prev | Delete & Next Move to: INBOX INBOX.Drafts INBOX.Sent INBOX.Trash INBOX.infected