[TYPO3-english] Suhosin and TYPO3 - Best pratice

Kay Strobach typo3 at kay-strobach.de
Wed Dec 1 13:34:07 CET 2010


Hi,

open_basedir dir is really senselesse, as long as you allow functions
like exec, system, passthrough ;)

Therefore there was a discussion to mark this as deprecated.

http://www.php.net/manual/en/ini.core.php#ini.open-basedir

Best regards
Kay

Am 01.12.2010 12:22, schrieb Santiago:
> Hi,
> 
>> Yes, that's one we encountered as well. And some other, depending on the
>> extensions you rely on.
> 
> it happended to me, that the last php update (on debian squeeze) "killed" all 
> typo3 installations. I have suhosin patch enabled and I had to disable 
> open_basedir at all to bring back typo3 into play.
> I'm very unhappy with that workaround and I hope there will be another 
> solution.
> 
> I use the apache vhost templates from typo3 with several virtual hosts.
> 
> The new entry is:
>    php_admin_value open_basedir none
>  
> 
> kind regards
> 
> Santi



More information about the TYPO3-english mailing list