WebApp Sec mailing list archives

Re: PHP Directory Transversal


From: Sarath Kummamuru <kcsarath () gmail com>
Date: Thu, 10 Mar 2005 20:48:41 +0530

Hi,

There could be multiple reasons for this.

If safe_mode is on, php puts some security restrictions on fopen and
related API for accessing files.

if open_basedir is set, again fopen is restricted to look for files
only under the base dir tree.

So probably in your case, you donot have either of them set, but in
the site that you are  analysing probably some of these configuration
are set.

Sarath.
http://www.quadone.com


Current thread: