note 14176 added to security.apache.php
| From: | dallas at SPAMISBAD dot newdream dot net | Date: | Fri, 20 Jul 2001 02:21:22 +0000 |
| Subject: | note 14176 added to security.apache.php | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-15603@lists.php.net to get a copy of this message | ||
The open_basedir option does a good job of restricting fopen, include, readfile, etc, but it
doesn't stop users from execing standard UNIX commands like cat. You can stop that also to
some degree by using the disable_funtions option and disable system,exec,passthru. But I can't
seem to find a way to disable the use of the backtick operator (``).
http://www.php.net/manual/en/security.apache.php