# new security related directive for php-4.3.4

- Thread: https://externals.io/message/8623
- Original archive: https://news-web.php.net/php.internals/8623
- Started by boulat@funio.com on 2004-03-19T21:06:23+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #8623 — boulat@funio.com — 2004-03-19T21:06:23+00:00

URL: https://externals.io/message/8623#8623

> 
> > […]
>
> That's a good point.  But this implementation still doesn't seem very
> slick to me.  What about something like:
>
>   open_basedir = /var/www/{user}/public_html

That's a great way of doin it too, Rasmus.
virtual_root_level might not be very slick, however, it was the
simplest/easier way to solve the problem I was able to up with at the
time.

> Where {user} would map to the owner of the script being executed.  Other
> things that might be supported as well:  {group}, {regex:a.*$}, {host}
> and probably other things as well.  I haven't thought through this very
> much yet, but that seems like a more flexible approach to this problem.

the beauty of open source... ;)

Cheers,
Boulat.


>
> -Rasmus