note 52158 added to security.apache

Sure, Open_basedir does NOT protect against this: <? exec("/usr/bin/cat /etc/passwd",$output); var_dump($output) ; ?> But, why would you put this code on a public page? ---- Manual Page -- http://www.php.net/manual/en/security.apache.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+52158 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+52158&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+52158&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+52158&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+52158&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+52158&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+52158&report=yes Search -- http://master.php.net/manage/user-notes.php