[TYPO3-core] RFC #8130: Bug: addService() working with open_basedir and symlink

Xavier Perseguers typo3 at perseguers.ch
Sun Apr 20 23:44:43 CEST 2008


Hello,

>> Solution:
>> The patch takes care of finding out if open_basedir is used and if so,
>> assumes that the administrator knows what he did and returns true for
>> any external tool located as a direct child of a directory listed in
>> open_basedir PHP configuration's property.
> 
> I would prefer to check for a symbolic link. If is_symlink returns true you
> can also omit the check if the file is within the open_basedir, because it
> would not work otherwise.

I would prefer too, and I tested it before creating my patch but for an 
odd reason I cannot yet understand, is_symlink() does not work either 
and always returns false, just as is_executable()! I know this is really 
strange!

Regards,

Xavier Perseguers


More information about the TYPO3-team-core mailing list