Open Basedir Restriction

  • FettesPS
  • Beginner
  • Beginner
  • FettesPS
  • Posts: 42
  • Loc: Canada

Post 3+ Months Ago

I have open_basedir enabled so that users cannot access other users files. However it is stopping people from navigating down a directory. So if their home is /usr/www/user1 and they create a folder in that called test (/usr/www/user1/test) and try to require/include a file from /usr/www/user1 they get an open_basedir error. Should it not be denying them only if they try to access outside of their home, and not within folders in their own home directory?

In php.ini the line is set to:
open_basedir = "./"

Is this correct?
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • AnarchY SI
  • Web Master
  • Web Master
  • User avatar
  • Posts: 2521
  • Loc: /usr/src/MI

Post 3+ Months Ago

i think you need to add the full path. either that or try like, "~/"
although someone else will be more knowledgeable about this than me. :]
but from searching google it seems a lot of people get errors about the path because they dont have the proper directories specified

you may also want to check out some of the security sites about getting around such a preventative measure such as:
http://www.security.nnov.ru/Gnews905.html
http://secunia.com/advisories/13023/
http://securityreason.com/achievement_securityalert/36

did you try Google?

Post Information

  • Total Posts in this topic: 2 posts
  • Users browsing this forum: No registered users and 64 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.