Openbase dir restriction

[spookie]

Hi,

Some servers have openbase dir restriction, (hence we cant use php copy() ).I failed to understand how this can cause a security risk.(ie there is always a workaround to use system cp function).
Any thoughts?

Thanks in advance


--------------------------------------------------------------------------
I never set a goal because u never know whats going to happen tommorow.

 

[sleipnir214]

You can not necessarily use system functions to work around the restriction.

If the sysadmin, for example, has also set safe_mode_exec_dir, then PHP's exec family of functions will only run executables in that directory.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!

 

[spookie]

ok,

But what will u say if the openbase dir restriction is on and u can use system command as alternative.
I came across such a case..
What i mean is for exactly wht purpose that restriction is.cant figure it out..

Thanks

--------------------------------------------------------------------------
I never set a goal because u never know whats going to happen tommorow.