note 14176 deleted from security.apache by jimw
| From: | jimw@php.net | Date: | Wed, 31 Oct 2001 01:34:31 +0000 |
| Subject: | note 14176 deleted from security.apache by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-19659@lists.php.net to get a copy of this message | ||
The open_basedir option does a good job of restricting fopen, include, readfile, etc, but it
doesn't stop users from execing standard UNIX commands like cat. You can stop that also to
some degree by using the disable_funtions option and disable system,exec,passthru. But I can't
seem to find a way to disable the use of the backtick operator (``).