With all kind respect to Richard Buskirk and Daniel Brown (thank you for responding), their replies did not actually answer my question.
My question is: What module or php.ini setting would render inoperative a directory traversal of X parents?
My original post follows.
The following works (three parents):
include("../../../includes/ini.inc.php");
require_once("../../../includes/ini.inc.php");
The following works (four parents):
include("../../../../includes/ini.inc.php");
The following does not work (four parents):
require_once("../../../../includes/ini.inc.php");
That is, require_once() with four parents has been reported to have been disabled for security purposes. But apparently, not disabled is include() with four parents.
The device or setting which is causing the problem is not known to me. It may be just the four parents (and include() is getting the data from this file elsewhere) or it may be the combination.
It has been reported this is not a limit within open_basedir. So, what is it? What module or php.ini setting would have this effect?
Thank you.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
