Questions tagged [open-basedir]

Setting in PHP.INI limiting whether PHP can access files outside of the specified directory tree.

148 questions
1
vote
1 answer

Trying to Include Files outside of Document Root (Plesk 10)

Okay, I've tried everything, this is by far the best place it seems, I want to make Document Root here httpdocs/[folder]/html and I have php include files that I want to go above the root (require '../[folder]/file.php'] but not be able to access…
phpKid
  • 333
  • 1
  • 4
  • 14
1
vote
4 answers

open_basedir not having any effect

For my web hosting panel, users need to be blocked from accessing files outside their own directory (/var/www/u/s/username). I tried to use this line in httpd.conf to prevent people from going up a directory.
phpscriptcoder
1
vote
0 answers

PHP open_basedir restriction: (file) is not within the allowed path

Previously, I had attempted to upload and view files from another drive, see here. The web files were on the htdocs folder on the C: drive, but I needed to be able to save to a folder on the D: drive. I was successful completing this task. By…
John Beasley
  • 2,577
  • 9
  • 43
  • 89
1
vote
1 answer

open_basedir issue on Fat-free framework

I have this following issue with open_basedir restrictions. is_file(): open_basedir restriction in effect. File(/home/dev/bongos.com/vendor/bcosca/fatfree/lib/action/authaction.php) is not within the allowed path(s):…
Quentin
  • 900
  • 8
  • 13
1
vote
0 answers

PHP open_basedir restriction in effect, but file is actually within the allowed path

I've looked at questions (and answers) about openbase_dir where the required or included file was outside the allowed path(s). I've looked at all the suggested similar questions while editing this one, but I didn't find a case like mine. I'm using…
1
vote
1 answer

Running wordPress blog site in IIS (Windows Server)

I recently switched my site from Linux to Windows Server. In my old site there were WordPress Blog directory. For this I first uploaded entire blog directory to my new server & created database. Then re-configured database connection settings in…
SUN
  • 973
  • 14
  • 38
1
vote
0 answers

setting Document Root

When I set document root it prevents me from going back any further in directories. Is that anywhere near equivalent in protecting from a directory traversal attack as setting the open_base directive?
White Lotus
  • 353
  • 2
  • 6
  • 16
1
vote
1 answer

run composer.phar install from elsewhere

I need to run composer.phar install at the /public/website/examplewebstie.com/dev.examplewebsite.com/examplewebsite/. But my server has an open_basedir restriction on levels higher than /public/website/. Is there a way to run composer from…
Alex
  • 11
  • 2
1
vote
1 answer

Warning open_basedir restriction in effect

I know what exactly the problem is. I need to fix my open_basedir restriction. But the problem is, I don't know how exactly. PHP Warning: is_dir(): open_basedir restriction in effect. File(/usr/local/php55/lib/php/) is not within the allowed…
1
vote
1 answer

openbase_dir warning says file is not in path, but then lists the path correctly

I am using MDB2 in an old php project, which I have just moved to a new server. The project framework relies on some open_basedir config. But there's something pretty odd. I get the following error, which says a file…
petesiss
  • 994
  • 13
  • 30
1
vote
0 answers

Allow to include a script but prevent file system access to it

related to the search I seem to have a rather unpopular problem. I have a server running Plesk and multiple customers set up with a separate web space for each (no ssh access). Further there is a "main" script repository which I put outside the…
koani
  • 61
  • 1
  • 4
1
vote
0 answers

Conflict with upload_tmp_dir and open_basedir

I have a web server (Debian, Nginx) with multiple sites written in PHP. For security reasons, I'm restricting each site with open_basedir by specifying it as fastcgi_param in the Nginx configuration: location ~ \.php$ { try_files $uri =404; …
Ivar
  • 4,344
  • 6
  • 38
  • 53
1
vote
1 answer

IspConfig & PHP-FPM - PHP config read from different pool?

on my server I have the following setup: ISPConfig 3.0.5.4p2 Ubuntu 14.04 LTS Apache 2.4 PHP handled by PHP-FPM (one pool for each web) The problem is, that some web sites, that are configured as subdomains (v-host) sometimes report this strange…
Luciano
  • 11
  • 1
  • 3
1
vote
1 answer

jpgraph Warning (2): file_exists() [function.file-exists]: open_basedir restriction in effect

I'm having a trouble on making the jpgraph's image work on the web. When I run it in localhost the jpgraphs works but when I uploaded it there is an error message: Warning (2): file_exists() [function.file-exists]: open_basedir restriction in…
1
vote
0 answers

Can I apply PHP's open_basedir to socket paths?

The PHP manual states: open_basedir (string) Limit the files that can be accessed by PHP to the specified directory-tree, including the file itself. This directive is NOT affected by whether Safe Mode is turned On or Off. When a script tries to…
John WH Smith
  • 2,743
  • 1
  • 21
  • 31