php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #8167 safe_mode and doc_root don't work as documented
Submitted: 2000-12-08 09:36 UTC Modified: 2000-12-08 10:44 UTC
From: lgs at wearix dot com Assigned:
Status: Closed Package: Feature/Change Request
PHP Version: 4.0.1pl2 OS: Solaris 2.8
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: lgs at wearix dot com
New email:
PHP Version: OS:

 

 [2000-12-08 09:36 UTC] lgs at wearix dot com 
The documentation says that if I enable safe_mode and set doc_root, no scripts outside of the doc_root directory are served. I have not been able to get that to work and a quick search in the sources confirmed my suspicion that this feature is not implemented yet.

The relevant entries in my php.ini file:

safe_mode               =       On
doc_root                =       /u/www/WWW/conject/htdocs/db    ; the root of the php pages, used only if nonempty

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-12-08 10:44 UTC] jason@php.net 
You should rely on open_basedir instead of doc_root for now.
safe_mode is going to be revisted/redesigned soon. 

-Jason
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Thu Jun 11 08:00:01 2026 UTC