"Olivier Mascia" <[EMAIL PROTECTED]> schrieb im Newsbeitrag [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... | Hello, | | Olivier Mascia wrote: | | OM> SC> Yes, you can use the registry to do per-directory settings. | OM> SC> HKEY_LOCAL_MACHINE\SOFTWARE\PHP\Per Directory Values | OM> SC> Create keys for each directory, then add the entries. So if you're | OM> SC> website is at c:\inetpub\wwwroot, under the above key, add: | OM> SC> HKEY_LOCAL_MACHINE\SOFTWARE\PHP\Per Directory Values\c\inetpub\wwwroot\ | OM> SC> Then add the ini entries. | OM> | OM> It doesn't work well (or completely for me). | OM> If I override 'include_path' (restart IIS) I can see the new local | OM> setting reflected with phpinfo(). Great. | OM> But if also override 'open_basedir' and 'upload_tmp_dir', both these | OM> values keep their default global setting of 'no value' (there is indeed | OM> no values set for these in PHP.INI). | OM> | OM> Are there known bugs with this system ? Or could there be some | OM> mis-understanding of how it works on my side ? | OM> | OM> I defined three values in the key leaf corresponding to the root of the | OM> website I wanted to test against : | OM> | OM> include_path REG_SZ {the physical path of my website} | OM> open_basedir REG_SZ {the same} | OM> upload_tmp_dir REG_SZ {the same} | OM> | OM> And obviously only the include_path is taken into account. | OM> I do not know if it is only the first setting which is taken into | OM> account or if there is something un-understood by me regarding the other | OM> two, but it looks buggy. | OM> | OM> Thanks in advance for any hint or suggestion ! | | There must be something wrong on my way of thinking. | I checked the PHP source code and it looks like the loop to iterate over | the values in the registry is correct. Indeed I have another value which | I can change the local value without difficulties : 'sendmail_from'. | That is correctly reflected as locally changed (as well as 'include_path') | by phpinfo(). Though 'open_basedir' and 'upload_tmp_path' are still not | taken into account. |
I'm pretty shure you can't change open_basedir and upload_tmp_path values because of security issues. I think the IIS-per directory settings are parsed like the values in the .htaccess file with apache. So if the user could change the'open_basedir' value, he would be able to access any file on the server with php by just putting open_basedir="/"; into .htaccess (think of an ISP environment). I think I've read an article about that somewhere, but I can't remember where, sorry. Christoph -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
