note 52158 deleted from security.apache by nlopess
| From: | nlopess@php.net | Date: | Sat, 23 Apr 2005 12:16:01 +0000 |
| Subject: | note 52158 deleted from security.apache by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-88445@lists.php.net to get a copy of this message | ||
Note Submitter:
----
Sure, Open_basedir does NOT protect against this:
<?
exec("/usr/bin/cat /etc/passwd",$output);
var_dump($output) ;
?>
But, why would you put this code on a public page?