Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:105650 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 59031 invoked from network); 9 May 2019 11:11:15 -0000 Received: from unknown (HELO mail.kd2.org) (91.121.181.110) by pb1.pair.com with SMTP; 9 May 2019 11:11:15 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bohwaz.net; s=mail; h=Message-ID:References:In-Reply-To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Subject:To; bh=APe5Arm/tv5MC0+WN/GCB2OS+ym1c38a3Hnrmjouhv0=; b=lU3BCjerXvQigr1ox1VnGxYvEp6K6cYMw4162uq5aGHm4hV86txVBGsKmxMnl6xr0NcDGdHxq1DAXjZrd8HOVGby/qrTd+QyIGTAigXS3Wpahlja2rCHZqEB4LvYIYTtbGLPe+P+ii9gCRl4u7xBEBwAVikzHL6S2X92P43Mhq4=; Received: from narragoon by mail.kd2.org with local (Exim 4.84_2) (envelope-from ) id 1hOeDH-0000Mb-F3 for internals@lists.php.net; Thu, 09 May 2019 10:15:35 +0200 To: internals@lists.php.net X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 09 May 2019 10:15:35 +0200 In-Reply-To: References: Message-ID: X-Sender: php@bohwaz.net User-Agent: Roundcube Webmail/1.1.5 Subject: Re: [PHP-DEV] open_basedir? From: php@bohwaz.net (BohwaZ/PHP) Kia ora, I'm against deprecating it or removing it. As said earlier, it has some security value, especially with mass hosting. If I'm hosting thousands of websites for thousands of users, using chroot is not doable, and open_basedir is a good alternative (at least it's better than nothing). That's why it's used by ISPconfig and other panels: there is no other solution that I know of.