Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:8612 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 62433 invoked by uid 1010); 19 Mar 2004 18:10:22 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 62399 invoked from network); 19 Mar 2004 18:10:22 -0000 Received: from unknown (HELO colo.lerdorf.com) (66.198.51.121) by pb1.pair.com with SMTP; 19 Mar 2004 18:10:22 -0000 Received: from rasmus2.corp.yahoo.com (rasmus2.corp.yahoo.com [207.126.233.18]) by colo.lerdorf.com (8.12.11/8.12.11/Debian-3) with ESMTP id i2JIAFIn011626; Fri, 19 Mar 2004 10:10:15 -0800 Date: Fri, 19 Mar 2004 10:10:10 -0800 (PST) X-X-Sender: rasmus@thinkpad.lerdorf.com To: boulat@funio.com cc: internals@lists.php.net In-Reply-To: <61700.66.158.132.127.1079718509.squirrel@www.funio.com> Message-ID: References: <61700.66.158.132.127.1079718509.squirrel@www.funio.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=-4.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on colo Subject: Re: [PHP-DEV] new security related directive for php-4.3.4 From: rasmus@php.net (Rasmus Lerdorf) So if your script is: /path1/path2/path3/foo.php And your virtual_root_level is set to 2 then foo.php will be able to open files anywhere under /path1/path2 How is that different from simply setting open_basedir to /path1/path2 ? Is it because you have a bunch of different paths for every user and you don't want to add all these to your open_basedir list? It seems a bit fishy to me. There is nothing wrong with have vhost-specific open_basedir settings. -Rasmus On Fri, 19 Mar 2004 boulat@funio.com wrote: > Hi internals, > > I added "virtual_root_level" new security related directive > into php-4.3.4. > > Full description with the patch can be found in here > > http://www.boulat.net/projects/virtual_root_level/ > > Some feedback/comments would be appreciated. > > Regards, > Boulat > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php >