From: Rasmus Lerdorf <rasmus@php.net>
Date: Wed, 4 Jul 2001 03:53:12 +0000 (+0000)
Subject: Stick open_basedir in here
X-Git-Tag: PRE_TSRM_MERGE_PATCH~282
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=649d14ae7966496a57d3a91bc8e93b1865bd565e;p=php

Stick open_basedir in here
---

diff --git a/php.ini-dist b/php.ini-dist
index e411294dc0..e5a1bf811a 100644
--- a/php.ini-dist
+++ b/php.ini-dist
@@ -111,8 +111,16 @@ allow_call_time_pass_reference = On
 ;
 safe_mode = Off
 
+; When safe_mode is on, only executables located in the safe_mode_exec_dir
+; will be allowed to be executed via the exec family of functions.
 safe_mode_exec_dir =
 
+; open_basedir if set limits all file operations to the defined directory
+; and below.  This directive makes most sense if used in a per-directory
+; or per-virtualhost web server configuration file.
+;
+;open_basedir =
+
 ; Setting certain environment variables may be a potential security breach.
 ; This directive contains a comma-delimited list of prefixes.  In Safe Mode,
 ; the user may only alter environment variables whose names begin with the