note 107375 added to ini.sect.safe-mode

The example of setting open_basdir to docroot has the effect of protecting files outside the web site but does NOT PROTECT files INSIDE the website, and could be construed as a suggested use. There is no reason to use open_basedir at all except to protect from misbehaving scripts. If there is a misbehaving script, one would not like it to delete, modify or upload files to the core website either. An example of a safer setting for open_basedir would be /docroot/safedir (or as is used in doc page "Description of core php.ini directives",open_basedir Note, to tighten it from /www/ to /www/tmp). ---- Server IP: 208.69.120.55 Probable Submitter: 99.18.231.227 ---- Manual Page -- http://www.php.net/manual/en/ini.sect.safe-mode.php Edit -- https://master.php.net/note/edit/107375 Del: integrated -- https://master.php.net/note/delete/107375/integrated Del: useless -- https://master.php.net/note/delete/107375/useless Del: bad code -- https://master.php.net/note/delete/107375/bad+code Del: spam -- https://master.php.net/note/delete/107375/spam Del: non-english -- https://master.php.net/note/delete/107375/non-english Del: in docs -- https://master.php.net/note/delete/107375/in+docs Del: other reasons-- https://master.php.net/note/delete/107375 Reject -- https://master.php.net/note/reject/107375 Search -- https://master.php.net/manage/user-notes.php