Return to open_basedir.inc CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / php / tests / security

Annotation of embedaddon/php/tests/security/open_basedir.inc, revision 1.1.1.1

1.1       misho       1: <?php
                      2: 
                      3: // This file contains helper functions for testing open_basedir configuration
                      4: // Care must be taken with where the directories are created because different
                      5: // SAPIs set the working directory differently. So simply creating a directory
                      6: // relative to the current working directory like this: mkdir("blah") might 
                      7: // actually create it in several different places depending on the SAPI..!
                      8: //
                      9: // Note also depending on the version of php being tested, so the open_basedir
                     10: // configuration may or may not be changeable from a script (PHP_INI_SYSTEM).
                     11: //
                     12: // For this reason we set the open_basedir to . (current directory) and then
                     13: // move around to various directories for testing using chdir(). This is NOT
                     14: // recommended for production use as . bypasses all semblence of security..!
                     15: //
                     16: // Although safe mode has been removed in php 6.0, open_basedir is still valid.
                     17: //      See http://www.php.net/features.safe-mode for more information
                     18: 
                     19: function recursive_delete_directory($directory) {
                     20: 
                     21:     // Remove any trailing slash first
                     22:     if (substr($directory, -1) == '/') {
                     23:         $directory = substr($directory, 0, -1);
                     24:     }
                     25: 
                     26:     // Make sure the directory is valid
                     27:     if (is_dir($directory) == FALSE) {
                     28:         return FALSE;
                     29:     } 
                     30: 
                     31:     // Check we can access the directory
                     32:     if (is_readable($directory) == FALSE) {
                     33:         return FALSE;
                     34:     }
                     35: 
                     36:     $handle = opendir($directory);
                     37: 
                     38:     // Scan through the directory contents
                     39:     while (FALSE !== ($item = readdir($handle))) {
                     40:         if ($item != '.') {
                     41:              if ($item != '..') {
                     42:                 $path = ($directory.'/'.$item);
                     43:                 if (is_dir($path) == TRUE) {
                     44:                     recursive_delete_directory($path);
                     45:                 } else {
                     46:                                        @chmod($path, 0777);
                     47:                     unlink($path);
                     48:                 }
                     49:             }
                     50:         }
                     51:     }
                     52: 
                     53:     closedir($handle);
                     54:        @chmod($directory, 0777);
                     55:     rmdir($directory);
                     56: 
                     57:     return TRUE;
                     58: }
                     59: 
                     60: function create_directories() {
                     61:     delete_directories();
                     62:     $directory = getcwd();
                     63: 
                     64:     var_dump(mkdir($directory."/test"));
                     65:     var_dump(mkdir($directory."/test/ok"));
                     66:     var_dump(mkdir($directory."/test/bad"));
                     67:     file_put_contents($directory."/test/ok/ok.txt", "Hello World!");
                     68:     file_put_contents($directory."/test/bad/bad.txt", "Hello World!");
                     69: }
                     70: 
                     71: function delete_directories() {
                     72:     $directory = (getcwd()."/test");
                     73:     recursive_delete_directory($directory);
                     74: }
                     75: 
                     76: function test_open_basedir_error($function) {
                     77:     global $savedDirectory;
                     78:     var_dump($function("../bad"));
                     79:     var_dump($function("../bad/bad.txt"));
                     80:     var_dump($function(".."));
                     81:     var_dump($function("../"));
                     82:     var_dump($function("/"));
                     83:     var_dump($function("../bad/."));
                     84:     $directory = $savedDirectory;
                     85:     var_dump($function($directory."/test/bad/bad.txt"));
                     86:     var_dump($function($directory."/test/bad/../bad/bad.txt"));
                     87: }
                     88: 
                     89: function test_open_basedir_before($function, $change = TRUE) {
                     90:     global $savedDirectory;
                     91:     echo "*** Testing open_basedir configuration [$function] ***\n";
                     92:     $directory = getcwd();
                     93:     $savedDirectory = $directory;
                     94:     var_dump(chdir($directory));
                     95:     create_directories();
                     96: 
                     97:     // Optionally change directory
                     98:     if ($change == TRUE) {
                     99:         var_dump(chdir($directory."/test/ok"));
                    100:     }
                    101: }
                    102: 
                    103: // Delete directories using a --CLEAN-- section!
                    104: function test_open_basedir_after($function) {
                    105:     echo "*** Finished testing open_basedir configuration [$function] ***\n";
                    106: }
                    107: 
                    108: // This is used by functions that return an array on success
                    109: function test_open_basedir_array($function) {
                    110:     global $savedDirectory;
                    111: 
                    112:     test_open_basedir_before($function);
                    113:     test_open_basedir_error($function); 
                    114:     var_dump(is_array($function("./../.")));
                    115:     var_dump(is_array($function("../ok")));
                    116:     var_dump(is_array($function("ok.txt")));
                    117:     var_dump(is_array($function("../ok/ok.txt")));
                    118:     $directory = $savedDirectory;
                    119:     var_dump(is_array($function($directory."/test/ok/ok.txt")));
                    120:     var_dump(is_array($function($directory."/test/ok/../ok/ok.txt")));
                    121:     test_open_basedir_after($function);
                    122: }
                    123: 
                    124: function test_open_basedir($function) {
                    125:     global $savedDirectory;
                    126:     test_open_basedir_before($function);
                    127:     test_open_basedir_error($function);     
                    128:     var_dump($function("./../."));
                    129:     var_dump($function("../ok"));
                    130:     var_dump($function("ok.txt"));
                    131:     var_dump($function("../ok/ok.txt"));
                    132:     $directory = $savedDirectory;
                    133:     var_dump($function($directory."/test/ok/ok.txt"));
                    134:     var_dump($function($directory."/test/ok/../ok/ok.txt"));
                    135:     test_open_basedir_after($function);
                    136: }
                    137: 
                    138: ?>
                    139: