Hi Stephanie,

> Isn't the point of open_basedir to limit what a php script can open to
> things that are in specific places? Doesn't it completely negate
> open_basedir to simply assign it "/" making everything accessible to php -
> certainly many configuration files, etc. that one might not desire be
> visible to anyone. Effectively it removes the open_basedir directive.

Of course. But hey, if people start to spread data all over the place and need 
their scripts to access /var and what not, then security is right out of the 
window anyway.

-- 
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
[email protected]
http://mail.blueonyx.it/mailman/listinfo/blueonyx

Reply via email to