[TYPO3-english] Suhosin and TYPO3 - Best pratice

Santiago santi013 at arcor.de
Wed Dec 1 15:01:29 CET 2010


Hi,

> open_basedir dir is really senselesse, as long as you allow functions
> like exec, system, passthrough ;)

really?

> Therefore there was a discussion to mark this as deprecated.
> 
> http://www.php.net/manual/en/ini.core.php#ini.open-basedir

Sorry, but I did not found any discussion or deprecation warning related to 
open_basedir
The discussion in the posted thread was about include dir - which imho is 
quite another story.

Any way - I hope, the current behaviour is a bug and will be fixed.
I can't see any reason, why php shall not respect the whitelist from 
open_basedir any more.

kind regards

Santi


More information about the TYPO3-english mailing list