Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:38994 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 77426 invoked from network); 15 Jul 2008 22:20:34 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 15 Jul 2008 22:20:34 -0000 Authentication-Results: pb1.pair.com header.from=rasmus@lerdorf.com; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=rasmus@lerdorf.com; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain lerdorf.com from 204.11.219.139 cause and error) X-PHP-List-Original-Sender: rasmus@lerdorf.com X-Host-Fingerprint: 204.11.219.139 mail.lerdorf.com Received: from [204.11.219.139] ([204.11.219.139:49660] helo=mail.lerdorf.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 7C/86-11609-1B22D784 for ; Tue, 15 Jul 2008 18:20:34 -0400 Received: from trainburn-lm.corp.yahoo.com (trainburn-lm.corp.yahoo.com [207.126.233.11]) (authenticated bits=0) by mail.lerdorf.com (8.14.3/8.14.3/Debian-4) with ESMTP id m6FMKUGn000465; Tue, 15 Jul 2008 15:20:30 -0700 Message-ID: <487D22AE.20109@lerdorf.com> Date: Tue, 15 Jul 2008 15:20:30 -0700 User-Agent: Thunderbird 2.0.0.4 (Macintosh/20070604) MIME-Version: 1.0 To: Lars Strojny CC: Amir Hardon , PHP Internals List References: <1216133436.6875.35.camel@amirh> <487CEF26.7030802@lerdorf.com> <1216159988.28846.12.camel@localhost> In-Reply-To: <1216159988.28846.12.camel@localhost> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (mail.lerdorf.com [204.11.219.139]); Tue, 15 Jul 2008 15:20:31 -0700 (PDT) Subject: Re: [PHP-DEV] lstat call on each directory level From: rasmus@lerdorf.com (Rasmus Lerdorf) Lars Strojny wrote: > Hi Rasmus, > > Am Dienstag, den 15.07.2008, 11:40 -0700 schrieb Rasmus Lerdorf: > [...] >> That's a realpath() call and it should be getting cached by the realpath >> cache, so if you are seeing these on every request, try increasing your >> realpath_cache size in your .ini. Without checking the realpath, you >> would be able to circumvent open_basedir checking really easily with a >> symlink. > > Couldn't we do that check only if open_basedir is active? Like I said, it is used for other things too, like include_once filename resolution. Check the code. -Rasmus