ID: 11566 Updated by: jason Reported By: [EMAIL PROTECTED] Old-Status: Open Status: Closed Old-Bug Type: PHP options/info functions Bug Type: *General Issues Operating system: PHP Version: 4.0.5 Assigned To: Comments: All of the safe_mode/open_basedir functionality will eventually be redesigned -Jason Previous Comments: --------------------------------------------------------------------------- [2001-06-19 13:35:21] [EMAIL PROTECTED] It appears most functions that accept path/filename args don't check open_basedir. The following code needs to be added to many functions after the convert_to_string_ex function call: if (php_check_open_basedir((*filename)->value.str.val)) RETURN_FALSE; where 'filename' could of course change. (this check is typically inserted before the safe_mode check since safe_mode is often not used because of it's limiting factor for ISPs) --------------------------------------------------------------------------- ATTENTION! Do NOT reply to this email! To reply, use the web interface found at http://bugs.php.net/?id=11566&edit=2 -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
