From 2d5b37124729a6f75bc189c0ef9e40dc143e7f2a Mon Sep 17 00:00:00 2001 From: F4ilji Date: Tue, 7 Apr 2026 19:53:33 +0500 Subject: [PATCH] =?UTF-8?q?fix(php):=20=D1=80=D0=B0=D0=B7=D1=80=D0=B5?= =?UTF-8?q?=D1=88=D0=B8=D1=82=D1=8C=20proc=5Fopen=20=D0=B4=D0=BB=D1=8F=20I?= =?UTF-8?q?nertia=20SSR=20=D0=B8=20=D1=80=D0=B0=D1=81=D1=88=D0=B8=D1=80?= =?UTF-8?q?=D0=B8=D1=82=D1=8C=20open=5Fbasedir=20=D0=B4=D0=BB=D1=8F=20comp?= =?UTF-8?q?oser=20(=D0=B2=D0=BA=D0=BB=D1=8E=D1=87=D0=B0=D1=8F=20/root)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Qwen-Coder --- _docker/app/php.ini | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/_docker/app/php.ini b/_docker/app/php.ini index 51e7054..9d68a52 100755 --- a/_docker/app/php.ini +++ b/_docker/app/php.ini @@ -22,15 +22,16 @@ session.cookie_lifetime = 0 ; ============================================ ; SECURITY: Ограничение доступа к файловой системе -; PHP имеет доступ только к /var/www, /tmp и /usr/local/bin (для composer) +; PHP имеет доступ только к /var/www, /tmp, /usr/local/bin, /usr/local/lib/php и /root (для composer cache) ; ============================================ -open_basedir = /var/www:/tmp:/usr/local/bin:/usr/local/lib/php +open_basedir = /var/www:/tmp:/usr/local/bin:/usr/local/lib/php:/root ; ============================================ ; SECURITY: Запрет опасных функций ; curl_exec и shell_exec оставлены — используются приложением (VK API, LibreOffice конвертация) +; proc_open и popen оставлены — требуются для Inertia SSR (Symfony Process) ; ============================================ -disable_functions = passthru,system,proc_open,popen,parse_ini_file,show_source,highlight_file,pcntl_exec,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid +disable_functions = passthru,system,parse_ini_file,show_source,highlight_file,pcntl_exec,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid ; ============================================ ; SECURITY: Запрет удалённого включения файлов