php open_basedir Confusion

This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
Post Reply
prabudh
Junior Member
Posts: 33
Joined: 10 Dec 2006, 13:05
Location: India
Contact:

php open_basedir Confusion

Post by prabudh »

hi,
i may be wrong on this.
CSF checks "Check php open_basedir protection" and those who have enabled this have Green indication in "CSF server security check Report".

but phpinfo still shows
open_basedir no value no value

does this means its protected or not protected.

regards,
pk
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

You can find out if it is enabled by editing your httpd.conf and looking for "php_admin_value open_basedir" lines in each VirtualHost container.
prabudh
Junior Member
Posts: 33
Joined: 10 Dec 2006, 13:05
Location: India
Contact:

yes httpd.conf does have this but php.ini says no value

Post by prabudh »

sir,
thanks for you kind attention i was just thinking why does php.ini still says "no value"

hoever http.conf does have
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/pratap/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>

regards,
pk
Post Reply