[BlueOnyx:03578] What is the correct setting

Richard C. Barker Sr. rc at probass.com
Fri Feb 12 14:14:06 -05 2010


What is the correct setting for the server's under the Security Tab and 
then PHP settings

For:
Open basedir:
Is it this
/home/:/tmp/:/var/lib/php/session/

Or This
/tmp/:/var/lib/php/session/


The help panel at the bottom says
Limit the files that can be opened by PHP to the specified 
directory-tree, including the file itself. This directive is NOT 
affected by whether Safe Mode is turned On or Off. When a script tries 
to open a file with, for example, fopen() or gzopen(), the location of 
the file is checked.

When the file is outside the specified directory-tree, PHP will refuse 
to open it. All symbolic links are resolved, so it's not possible to 
avoid this restriction with a symlink.

The special value '.' indicates that the working directory of the script 
will be used as the base-directory. This is, however, a little dangerous 
as the working directory of the script can easily be changed with 
chdir(). By default virtual sites only have access to /home, /tmp, 
/var/lib/php/session/ and the root directory of the virtual site in 
question.


Thank you,
RC

-- 
+---------------------------------------------+
  Richard C. Barker Sr.
+---------------------------------------------+



More information about the Blueonyx mailing list