NYCPHP Meetup

[pswebcode, nyc]

Here is a descrip of what the php.ini setting for open_basedir does:
 
Limit the files that can be opened by PHP to the specified directory-tree,
including the file itself. This directive is NOT affected by whether Safe
Mode is turned On or Off. 
When a script tries to open a file with, for example, fopen() or gzopen(),
the location of the file is checked. When the file is outside the specified
directory-tree, PHP will refuse to open it. All symbolic links are resolved,
so it's not possible to avoid this restriction with a symlink. 
The special value . indicates that the directory in which the script is
stored will be used as base-directory. 
Under Windows, separate the directories with a semicolon. On all other
systems, separate the directories with a colon. As an Apache module,
open_basedir paths from parent directories are now automatically inherited. 
The restriction specified with open_basedir is actually a prefix, not a
directory name. This means that "open_basedir = /dir/incl" also allows
access to "/dir/include" and "/dir/incls" if they exist. When you want to
restrict access to only the specified directory, end with a slash. For
example: "open_basedir = /dir/incl/" 
Note: Support for multiple directories was added in 3.0.7. 
The default is to allow all files to be opened. 
 
Run info.php in your site to check for your php.ini settings. You are
dealing with a "safe mode" file restriction. Works with all these types of
settings as below:

safe_mode "0" PHP_INI_SYSTEM 
safe_mode_gid "0" PHP_INI_SYSTEM 
safe_mode_include_dir NULL PHP_INI_SYSTEM 
safe_mode_exec_dir "" PHP_INI_SYSTEM 
safe_mode_allowed_env_vars PHP_ PHP_INI_SYSTEM 
safe_mode_protected_env_vars LD_LIBRARY_PATH PHP_INI_SYSTEM 
open_basedir NULL PHP_INI_SYSTEM 
disable_functions "" PHP_INI_SYSTEM 
disable_classes "" PHP_INI_SYSTEM 
 
PSaw

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Phil Powell
Sent: Friday, August 08, 2003 7:58 PM
To: NYPHP Talk
Subject: [nycphp-talk] open_basedir() error in PHP script


Warning: open_basedir restriction in effect. File is in wrong directory in
Unknown on line 0

Warning: Failed opening '/users/ppowell/web/cma/index.php' for inclusion
(include_path='.:/usr/local/lib/php') in Unknown on line 0

 
I get this error upon opening a PHP script I wrote; however, upon refreshing
my browser, the error goes away and usually does not appear again.  The page
is not supposed to cache and I have caching turned off on my script:
 
<?
 
  // PREVENT CACHING FIRST BEFORE ANYTHING ELSE!
  header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");    // Date in the past
  header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always
modified
  // HTTP/1.1
  header("Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0");
  header("Pragma: no-cache");                          // HTTP/1.0
....
 
?>
 
I have no idea why this happens but I can tell you that this script
/cma/index.php will go to a TCL CGI script which will go back to
/cma/index.php eventually upon form completion or linkage or some user
action.
 
Phil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20030808/a69b0784/attachment.html>