suphp & php.ini & open_basedir

[rlshosting]

What setting do I use? This is a shared hosting server for clients.

 

[cPanelTristan]

Hello,

Are you asking what path to put into the php.ini file for open_basedir protection? So something like the following:

open_basedir = /home/:/usr/lib/php:/usr/local/lib/php:/tmp

If this is not what you are asking, please clarify with further details on what is needed.

Thanks!

 

[rlshosting]

Ya. That's what I mean. Thank you.

 

[postcd]

Please what is the secure setting when using wordpress blog and phpbb forum on hosting account,

isnt

open_basedir = /home/:/usr/lib/php:/usr/local/lib/php:/tmp

risky and too general?

When i add this line into php.ini my security audit script still says:

open_basedir - Your configuration should be changed to enforce a base directory (i.e. "/var/www/") to prevent PHP from accessing other directories on the underlying filesystem.