|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2013-12-03 11:37 UTC] mike@php.net
-Status: Open
+Status: Not a bug
[2013-12-03 11:37 UTC] mike@php.net
|
|||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Mon Oct 27 21:00:02 2025 UTC |
Description: ------------ Imagick does not respect SAFE_MODE restrictions. It can open files owned by other users, and does not apply the open_base_dir restriction. Reproduce code: --------------- <?php $image='/root/test.jpg'; $handle=imagick_readimage($image); if(imagick_iserror($handle)) echo 'cant\'t read : ',$image,' <br>', imagick_failedreason($handle),imagick_faileddescription($handle); else echo 'OK !'; ?> Expected result: ---------------- Image should not be accessed. Actual result: -------------- Image is correctly read.