|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2011-09-22 09:36 UTC] pajoye@php.net
-Status: Open
+Status: Bogus
[2011-09-22 09:36 UTC] pajoye@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Sun Nov 02 08:00:02 2025 UTC |
Description: ------------ On Apache I have: <Directory "/var/www/sample/locked"> php_admin_value open_basedir "/var/www/sample/locked" </Directory> The test script will be located on /var/www/sample/locked/test.php It will try to read with a system() call something outside my open_basedir scope. Eg: system('ls -la ../'); Test script: --------------- <?php system('ls -la ../'); system('cat ../disallowedfolder/credentials.php'); Expected result: ---------------- I should not see any output. Actual result: -------------- I can list the folders on the path outside my open_basedir