WebApp Sec: Re: PHP Directory Transversal

[Alex 'CAVE' Cernat <cave () cernat ro>]

On Mon, 14 Mar 2005 17:02:38 +0000
"Andres Molinetti" <andymolinetti () hotmail com> wrote:

> It seems that the problem was that it had "safe_mode" on....
there is a bug/feature in safe_mode: even it is on you can still get out
from your home directory 

a good solution is to use the open_basedir directive (but it will need
some additional hacks - temp dir, upload dir etc.)

Alex