OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: PHP Directory Transversal

From: Sarath Kummamuru (kcsarathgmail.com)
Date: Thu Mar 10 2005 - 09:18:41 CST

Hi,

There could be multiple reasons for this.

If safe_mode is on, php puts some security restrictions on fopen and
related API for accessing files.

if open_basedir is set, again fopen is restricted to look for files
only under the base dir tree.

So probably in your case, you donot have either of them set, but in
the site that you are analysing probably some of these configuration
are set.

Sarath.
http://www.quadone.com