From: [EMAIL PROTECTED] Operating system: linux PHP version: 4.0.5 PHP Bug Type: PHP options/info functions Bug description: It appears most functions don't check open_basedir It appears most functions that accept path/filename args don't check open_basedir. The following code needs to be added to many functions after the convert_to_string_ex function call: if (php_check_open_basedir((*filename)->value.str.val)) RETURN_FALSE; where 'filename' could of course change. (this check is typically inserted before the safe_mode check since safe_mode is often not used because of it's limiting factor for ISPs) -- Edit Bug report at: http://bugs.php.net/?id=11566&edit=1 -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
