ID: 24333
Updated by: [EMAIL PROTECTED]
Reported By: david at darville dot name
-Status: Open
+Status: Closed
Bug Type: Filesystem function related
Operating System: RedHat Linux
PHP Version: 4.3.2
New Comment:
Already fixed in CVS.
Previous Comments:
------------------------------------------------------------------------
[2003-06-25 07:31:15] david at darville dot name
Description:
------------
Even when safe mode is enabled, and open_basedir restrictions is in
place, it is possible to use file_exists(), stat() (and fileperms()) on
any file on the system.
Reproduce code:
---------------
$filename = "/etc/shadow";
if (file_exists($filename))
{
echo "$filename exists\n";
}
else
{
echo "$filename does not exist\n";
}
$stat = stat($filename);
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=24333&edit=1
