From 8064d239da256fec4ece5d81d0884bf3cf8b98cb Mon Sep 17 00:00:00 2001 From: Alexandre Daubois Date: Tue, 3 Dec 2024 17:11:38 +0100 Subject: [PATCH] [PHP 8.3] Parent dir with `open_basedir` and `ini_set` at runtime --- appendices/ini.core.xml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/appendices/ini.core.xml b/appendices/ini.core.xml index e1a97ac856f6..1be2942eb231 100644 --- a/appendices/ini.core.xml +++ b/appendices/ini.core.xml @@ -1265,7 +1265,7 @@ include_path = ".:${USER}/pear/php" The default is to allow all files to be opened. - + open_basedir can be tightened at run-time. This means that if open_basedir is set to /www/ in &php.ini; a script can tighten the configuration to @@ -1273,7 +1273,12 @@ include_path = ".:${USER}/pear/php" ini_set. When listing several directories, you can use the PATH_SEPARATOR constant as a separator regardless of the operating system. - + + + As of PHP 8.3.0, no longer accepts a + paths containing the parent directory (..) when + set at runtime using ini_set. +