Setting in PHP.INI limiting whether PHP can access files outside of the specified directory tree.
Questions tagged [open-basedir]
148 questions
1
vote
1 answer
Trying to Include Files outside of Document Root (Plesk 10)
Okay, I've tried everything, this is by far the best place it seems, I want to make Document Root here httpdocs/[folder]/html and I have php include files that I want to go above the root (require '../[folder]/file.php'] but not be able to access…

phpKid
- 333
- 1
- 4
- 14
1
vote
4 answers
open_basedir not having any effect
For my web hosting panel, users need to be blocked from accessing files outside their own directory (/var/www/u/s/username). I tried to use this line in httpd.conf to prevent people from going up a directory.
phpscriptcoder
1
vote
0 answers
PHP open_basedir restriction: (file) is not within the allowed path
Previously, I had attempted to upload and view files from another drive, see here.
The web files were on the htdocs folder on the C: drive, but I needed to be able to save to a folder on the D: drive. I was successful completing this task.
By…

John Beasley
- 2,577
- 9
- 43
- 89
1
vote
1 answer
open_basedir issue on Fat-free framework
I have this following issue with open_basedir restrictions.
is_file(): open_basedir restriction in effect. File(/home/dev/bongos.com/vendor/bcosca/fatfree/lib/action/authaction.php) is not within the allowed path(s):…

Quentin
- 900
- 8
- 13
1
vote
0 answers
PHP open_basedir restriction in effect, but file is actually within the allowed path
I've looked at questions (and answers) about openbase_dir where the required or included file was outside the allowed path(s). I've looked at all the suggested similar questions while editing this one, but I didn't find a case like mine.
I'm using…

Alessandro Raffa
- 11
- 4
1
vote
1 answer
Running wordPress blog site in IIS (Windows Server)
I recently switched my site from Linux to Windows Server. In my old site there were WordPress Blog directory. For this I first uploaded entire blog directory to my new server & created database. Then re-configured database connection settings in…

SUN
- 973
- 14
- 38
1
vote
0 answers
setting Document Root
When I set document root it prevents me from going back any further in directories. Is that anywhere near equivalent in protecting from a directory traversal attack as setting the open_base directive?

White Lotus
- 353
- 2
- 6
- 16
1
vote
1 answer
run composer.phar install from elsewhere
I need to run composer.phar install at the /public/website/examplewebstie.com/dev.examplewebsite.com/examplewebsite/.
But my server has an open_basedir restriction on levels higher than /public/website/.
Is there a way to run composer from…

Alex
- 11
- 2
1
vote
1 answer
Warning open_basedir restriction in effect
I know what exactly the problem is. I need to fix my open_basedir restriction. But the problem is, I don't know how exactly.
PHP Warning: is_dir(): open_basedir restriction in effect. File(/usr/local/php55/lib/php/) is not within the allowed…

Anthony Bijlsma
- 49
- 2
- 7
1
vote
1 answer
openbase_dir warning says file is not in path, but then lists the path correctly
I am using MDB2 in an old php project, which I have just moved to a new server.
The project framework relies on some open_basedir config.
But there's something pretty odd.
I get the following error, which says a file…

petesiss
- 994
- 13
- 30
1
vote
0 answers
Allow to include a script but prevent file system access to it
related to the search I seem to have a rather unpopular problem. I have a server running Plesk and multiple customers set up with a separate web space for each (no ssh access). Further there is a "main" script repository which I put outside the…

koani
- 61
- 1
- 4
1
vote
0 answers
Conflict with upload_tmp_dir and open_basedir
I have a web server (Debian, Nginx) with multiple sites written in PHP. For security reasons, I'm restricting each site with open_basedir by specifying it as fastcgi_param in the Nginx configuration:
location ~ \.php$ {
try_files $uri =404;
…

Ivar
- 4,344
- 6
- 38
- 53
1
vote
1 answer
IspConfig & PHP-FPM - PHP config read from different pool?
on my server I have the following setup:
ISPConfig 3.0.5.4p2
Ubuntu 14.04 LTS
Apache 2.4
PHP handled by PHP-FPM (one pool for each web)
The problem is, that some web sites, that are configured as subdomains (v-host) sometimes report this strange…

Luciano
- 11
- 1
- 3
1
vote
1 answer
jpgraph Warning (2): file_exists() [function.file-exists]: open_basedir restriction in effect
I'm having a trouble on making the jpgraph's image work on the web. When I run it in localhost the jpgraphs works but when I uploaded it there is an error message:
Warning (2): file_exists() [function.file-exists]: open_basedir
restriction in…

Some Ting Wong
- 27
- 1
- 8
1
vote
0 answers
Can I apply PHP's open_basedir to socket paths?
The PHP manual states:
open_basedir (string)
Limit the files that can be accessed by PHP to the specified directory-tree, including the file itself. This directive is NOT affected by whether Safe Mode is turned On or Off.
When a script tries to…

John WH Smith
- 2,743
- 1
- 21
- 31