php - nx.beandog.org

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== PHP ======

  * [[PHP Configuration]]
  * [[PHP CGI]]
  * [[PHP Install From Source]]
  * [[PHP Optimization]]
  * [[PHP Security]]
  * [[PHP Unicode]]
  * [[Apache Worker MPM PHP CGI Suexec Setup]]
  * [[CentOS PHP]]
  * [[OpenBSD PHP]]


  * [[http://www.php.net/manual/en/extensions.membership.php|PHP Extensions]]
  * [[http://www.php.net/manual/en/configure.about.php|List of core configure options]]
  * [[http://www.php.net/manual/en/configuration.php|Runtime configuration]]
  * [[http://www.php.net/manual/en/ini.list.php|List of php.ini directives]]
  * [[http://www.php.net/manual/en/ini.sections.php|List of php.ini sections]] - Very cool!

==== Gotchas ====

=== open_basedir and CURLOPT_FOLLOWLOCATION ===

  * [[http://au.php.net/manual/ro/function.curl-setopt.php#71313|similiar problem, workaround]]

This error appears in the PHP log:

<code>
PHP Warning:  curl_setopt() [<a href='function.curl-setopt'>function.curl-setopt</a>]: CURLOPT_FOLLOWLOCATION cannot be activated when safe_mode is enabled or an open_basedir is set in /var/foo/bar.php on line 123
</code>

Updating open_basedir to include the directory won't work, because the curl option ''CURLOPT_FOLLOWLOCATION'' is disabled by PHP when ''open_basedir'' is set.

The purpose for this not working is that curl will follow a result with a header pointing to another location, which creates the option of directory traversal outside of the limited basedir.

This change was introduced in PHP 4.4.4.

Trace: • openbsd_liveusb • asciidoc • security • cryptsetup • port • percona_xtradb

Navigation

Search

Toolbox

QR Code