[TYPO3-core] RFC #8130: Bug: addService() working with open_basedir and symlink

Martin Kutschker martin.kutschker-n0spam at no5pam-blackbox.net
Tue Apr 22 22:58:41 CEST 2008


Xavier Perseguers schrieb:
> Hi,
> 
>>>> I would prefer to check for a symbolic link. If is_symlink returns
>> true you
>>>> can also omit the check if the file is within the open_basedir,
>> because it
>>>> would not work otherwise.
>>> I would prefer too, and I tested it before creating my patch but for
>> an 
>>> odd reason I cannot yet understand, is_symlink() does not work
>> either 
>>> and always returns false, just as is_executable()! I know this is
>> really 
>>> strange!
> 
> It might be caused by the PHP 5.2.0 I am running. I found a bug report that is now closed :
> 
> http://bugs.php.net/bug.php?id=31309
> 
> and says that the corresponding bug was fixed in PHP 5.2.3.

But did you also see that the original report is more than two years 
old? If it is indeed a bug it must be exiting in 4.x and 5.x up to 
5.2.2. In this case your fix must deal with the behaviour of is_link() 
broken or not.

Masi


More information about the TYPO3-team-core mailing list