Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:8617
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
In-Reply-To: <60321.66.158.132.127.1079720603.squirrel@www.funio.com>
References: <60321.66.158.132.127.1079720603.squirrel@www.funio.com>
Mime-Version: 1.0 (Apple Message framework v613)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-ID: <8332D5BD-79D4-11D8-806A-000A95B959C0@netcollective.nl>
Content-Transfer-Encoding: 7bit
Cc: internals@lists.php.net
Date: Fri, 19 Mar 2004 19:37:44 +0100
To: boulat@funio.com
Subject: Re: [PHP-DEV] new security related directive for php-4.3.4
From: dewaard@netcollective.nl (Filip de Waard)

On Mar 19, 2004, at 7:23 PM, boulat@funio.com wrote:
> Its not really duplicating anyting in open_basedir. As a metter of 
> fact it
> is meant to be used together with open_basedir for best results.
>
> ISP and people doin mass hosting would mainly benefit from that patch.

By using open_basedir in combination with cPanel (commercial hosting 
automation product) my company (an ISP) prevents users from reading 
files outside of their own /home directory.

Since cPanel is able to handle automagic deployment of open_basedir I 
would like to suggest to invest your time in creating an open source 
alternative to this closed source functionality, instead of reinventing 
open_basedir.

Regards,

Filip de Waard