From:             [EMAIL PROTECTED]
Operating system: linux
PHP version:      4.0.5
PHP Bug Type:     PHP options/info functions
Bug description:  It appears most functions don't check open_basedir

It appears most functions that accept path/filename args don't check open_basedir.  
The following code needs to be added to many functions after the convert_to_string_ex 
function call:

if (php_check_open_basedir((*filename)->value.str.val)) RETURN_FALSE;

where 'filename' could of course change.

(this check is typically inserted before the safe_mode check since safe_mode is often 
not used because of it's limiting factor for ISPs)

Edit Bug report at:

PHP Development Mailing List <>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to