From 24f1a64fca0d14df510c780664f48c5377a7d39e Mon Sep 17 00:00:00 2001 From: "Fedor A. Fetisov" Date: Mon, 28 Oct 2013 15:29:29 +0400 Subject: [PATCH] Restrict opening of files outside the Mibew installation --- src/mibew/libs/init.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/mibew/libs/init.php b/src/mibew/libs/init.php index 5a17f01a..8561025d 100644 --- a/src/mibew/libs/init.php +++ b/src/mibew/libs/init.php @@ -15,6 +15,9 @@ * limitations under the License. */ +// Prevent Mibew from access to files outside the installation +ini_set('open_basedir', dirname(dirname(__FILE__))); + // Initialize user session session_start();