Hi ...
I have several virtual servers running under apache 1.3.20 and php
4.0.6, they are all locatet under one tree:
/virt-servers/{name}
At the current config apache is running as user nobody. this user has
read ability on the /virt_servers dir. Now a user can read access the
whole path, he can also read other users files, which may include
usernames/passwords.
Now I tried to set the value open_basedir, so that scripts for a
specific virtual server can only access files within this virt-server
my virt-server directiv in httpd.conf looks like this
<VirtualHost 1.2.3.4>
ServerAdmin [EMAIL PROTECTED]
DocumentRoot /home/me/web
ServerName eggi.me.com
ErrorLog /apachelogs/eggi/errorlog/eggi_error.log
TransferLog "|rotatelogs /apachelogs/eggi/transferlog/eggi_transfer.log
30"
php_value include_path "/home/me/web"
php_value open_basedir "/home/me/web"
</VirtualHost>
the value include_path is set correctly, which I checked with phpinfo()
.. but open_basedir doesn't seem to be set ...
someone knows why?
any hints?
--
mfg
Marc Eggenberger
--
PHP Install Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
