Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:115411
To: Nikita Popov <nikita.ppv@gmail.com>,
 Stanislav Malyshev <smalyshev@gmail.com>
Cc: PHP internals <internals@lists.php.net>
References: <CAF+90c-4-R4SYY_AAL679ZYBn2QAZTYAGXH6E6Bz1hYGN=MFcA@mail.gmail.com>
 <5af05f50-cf90-c0f2-adb7-b70b57ca1186@gmx.de>
 <d6cea3fb-25b7-fee8-26b8-8705fb33fc5e@gmail.com>
 <CAF+90c_23nSxd5zJjtdTP8yNKquwNK9sERi8E7VpQ6oxHRa1EQ@mail.gmail.com>
Message-ID: <811055b1-cfd2-851d-267b-50286b2a8b3c@gmx.de>
Date: Mon, 12 Jul 2021 17:31:30 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.11.0
MIME-Version: 1.0
In-Reply-To: <CAF+90c_23nSxd5zJjtdTP8yNKquwNK9sERi8E7VpQ6oxHRa1EQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Language: de-DE
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Re: open_basedir?
From: cmbecker69@gmx.de ("Christoph M. Becker")

On 12.07.2021 at 15:54, Nikita Popov wrote:

> On Thu, Jul 8, 2021 at 11:34 PM Stanislav Malyshev <smalyshev@gmail.com>
> wrote:
>
>>> Apparently, there has been no resolution for this issue so far.  While=
 I
>>> don't really care about the open_basdedir directive per se, I fully
>>> agree that we should not advertize it as security feature, and to
>>> clearly state this in the PHP manual, as well as in our security polic=
y.
>>
>> Correct. As I mentioned, de-facto it's already the case for years now.
>> Let's fix the docs at least? Though I'd really start thinking about
>> maybe removing it in the next major version...
>
> Yeah, feel free to go ahead with updates for docs & security policy.

Done with
<https://github.com/php/doc-en/commit/c0fb8cac832c2f51f1eb5e5ab7247e8db6a3=
2c2e>
and <https://wiki.php.net/security?rev=3D1626103722&do=3Ddiff>.

Christoph