use open_basedir

diff --git a/public/index.php b/public/index.php
index d4518cd3a26691a5387aea740d173ea90cc09703..23a1be2cf1a8595337669918a3438a80f4ef27fe 100644 (file)
--- a/public/index.php
+++ b/public/index.php
@@ -3,7 +3,9 @@
 define("ROOT", dirname(__DIR__));
 define("REFS", getenv("REFPATH") ?: implode(PATH_SEPARATOR, glob(ROOT."/refs/*")));
 
-$loader = require __DIR__ . "/../vendor/autoload.php";
+ini_set("open_basedir", ROOT.":".REFS);
+
+$loader = require ROOT . "/vendor/autoload.php";
 /* @var $loader \Composer\Autoload\ClassLoader */
 $loader->add("mdref", ROOT);