So if your script is:

  /path1/path2/path3/foo.php

And your virtual_root_level is set to 2 then foo.php will be able to open 
files anywhere under /path1/path2

How is that different from simply setting open_basedir to /path1/path2 ?

Is it because you have a bunch of different paths for every user and you 
don't want to add all these to your open_basedir list?  It seems a bit 
fishy to me.  There is nothing wrong with have vhost-specific open_basedir 
settings.

-Rasmus


On Fri, 19 Mar 2004 [EMAIL PROTECTED] wrote:

> Hi internals,
> 
> I added "virtual_root_level" new security related directive
> into php-4.3.4.
> 
> Full description with the patch can be found in here
> 
> http://www.boulat.net/projects/virtual_root_level/
> 
> Some feedback/comments would be appreciated.
> 
> Regards,
> Boulat
> 
> -- 
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
> 

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to