|   | php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login | 
| 
  [2000-11-16 10:15 UTC] jim at perigee dot net
 doc_root string - PHP's "root directory" on the server. If PHP is configured with safe mode, no files outside this directory are served. -- Why does php 4 handle this so differently than 3 did, especially when it comes to referencing file locations like when including files? I have had to resort to using either "../" or $HTTP_SERVER_VARS['DOCUMENT_ROOT'] to access included files in PHP4 when before I used to be able to use /name.php notation to absolutely refer to the include files within the web site doc_root directory. We are running PHP in SAFE MODE. I think this may just be an oversight, but, if not, I would love an explanation of the rationale. PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits             | |||||||||||||||||||||||||||
|  Copyright © 2001-2025 The PHP Group All rights reserved. | Last updated: Fri Oct 31 02:00:02 2025 UTC | 
This is not a bug, just a change of behaviour, which is IMO much more logical and more clear than the old behaviour. Use open_basedir to restrict access to directories. include("/script.php") refers to the absolute path /script.php (the file script.php under the root)