Page 1 of 1

php open_basedir Confusion

Posted: 14 Dec 2006, 20:49
by prabudh
hi,
i may be wrong on this.
CSF checks "Check php open_basedir protection" and those who have enabled this have Green indication in "CSF server security check Report".

but phpinfo still shows
open_basedir no value no value

does this means its protected or not protected.

regards,
pk

Posted: 15 Dec 2006, 16:35
by chirpy
You can find out if it is enabled by editing your httpd.conf and looking for "php_admin_value open_basedir" lines in each VirtualHost container.

yes httpd.conf does have this but php.ini says no value

Posted: 15 Dec 2006, 17:59
by prabudh
sir,
thanks for you kind attention i was just thinking why does php.ini still says "no value"

hoever http.conf does have
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/pratap/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>

regards,
pk