|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2003-06-25 10:32 UTC] sniper@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Mon Oct 27 14:00:01 2025 UTC |
Description: ------------ Even when safe mode is enabled, and open_basedir restrictions is in place, it is possible to use file_exists(), stat() (and fileperms()) on any file on the system. Reproduce code: --------------- $filename = "/etc/shadow"; if (file_exists($filename)) { echo "$filename exists\n"; } else { echo "$filename does not exist\n"; } $stat = stat($filename);