Question

Suppose all web material is located within the directory /home/www. To prevent users from viewing and manipulating files such as /etc/password, which one of the following statements should you use?

(a) open_dir = “/home/www/”

(b) open_dir = /home/www/

(c) open_basedir = /home/www/

(d) open_basedir = “/home/www/”

The question was asked in unit test.

The query is from Website Security using PHP topic in chapter File and Session Handling in PHP of PHP

Answer 1

Right answer is (d) open_basedir = “/home/www/”

For explanation: We can use open_basedir statement to define the paths from which we can access files using functions like fopen() and gzopen(). It is used to prevent users from viewing and manipulating files such as /etc/password.