[PHP-DEV] Bug #11566 Updated: It appears most functions don't check open_basedir From: jason <email protected>
Date: 07/07/01

ID: 11566
Updated by: jason
Reported By: henry <email protected>
Old-Status: Open
Status: Closed
Old-Bug Type: PHP options/info functions
Bug Type: *General Issues
Operating system:
PHP Version: 4.0.5
Assigned To:
Comments:

All of the safe_mode/open_basedir functionality will eventually be redesigned

-Jason

Previous Comments:
---------------------------------------------------------------------------

[2001-06-19 13:35:21] henry <email protected>

It appears most functions that accept path/filename args don't check open_basedir. The following code needs to be added to many functions after the convert_to_string_ex function call:

if (php_check_open_basedir((*filename)->value.str.val)) RETURN_FALSE;

where 'filename' could of course change.

(this check is typically inserted before the safe_mode check since safe_mode is often not used because of it's limiting factor for ISPs)

---------------------------------------------------------------------------

ATTENTION! Do NOT reply to this email!
To reply, use the web interface found at http://bugs.php.net/?id=11566&edit=2 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>