1) open_basedir

Check	Value	Result	Note
open_basedir	/home/quantsite1992473113/:/usr/share/	PASS	restriction set
read /etc/passwd	denied	PASS	blocked
list /etc	denied	PASS	blocked
list / (root)	denied	PASS	blocked
list /home (tenant enumeration)	denied	PASS	blocked
read /etc/shadow	denied	PASS	blocked (DAC/basedir)

2) /tmp cross-tenant leak

Warning: file_exists(): open_basedir restriction in effect. File(/tmp/pentest_public_html_f61fc70626bffbf0a48a37e46c3a0629.txt) is not within the allowed path(s): (/home/quantsite1992473113/:/usr/share/) in /home/quantsite1992473113/quantsite.199-247-3-113.myboltip.com/public_html/index.php on line 595

Check	Value	Result	Note
this tenant tmp file	/tmp/pentest_public_html_f61fc70626bffbf0a48a37e46c3a0629.txt	PASS	not planted yet
other tenants /tmp markers	none	PASS	no foreign pentest_* visible
/tmp/sess_* leak	none	PASS	no foreign sess_* readable
/tmp/mysql.sock exists?	no	PASS	not present
/tmp/.s.PGSQL.5432 exists?	no	PASS	not present
/var/lib/mysql/mysql.sock exists?	no	PASS	not present

3) suEXEC / process identity

Check	Value	Result	Note
PHP process user	quantsite1992473113 (uid=? gid=? real_uid=?)	PASS	looks per-user
Process groups		PASS	must NOT be in "apache" group (would allow reading other FPM sockets)
Expected owner from DOC_ROOT	quantsite1992473113	PASS	matches
Newly-written file owner	2002	FAIL	wrong owner

4) Cross-tenant impersonation (target: bobi)

Probe	Result	Status	Note
stat /home/bobi	denied	PASS	blocked
list /home/bobi	denied	PASS	blocked
list /home/bobi/public_html	denied	PASS	blocked
read /home/bobi/.bashrc	denied	PASS	blocked
read /home/bobi/.bash_history	denied	PASS	blocked
read /home/bobi/.ssh/authorized_keys	denied	PASS	blocked
read /home/bobi/.ssh/id_rsa	denied	PASS	blocked
list /home/bobi/tmp/sessions	denied	PASS	blocked
write to /home/bobi/tmp/	denied	PASS	blocked
common config files (wp-config/.env/etc.)	none readable	PASS	blocked

5) open_basedir bypass tricks

Trick	Result	Status	Note
symlink to /etc/passwd	blocked	PASS	blocked
symlink /tmp -> /home/bobi/.bashrc	blocked	PASS	blocked
glob:// /etc/*	blocked	PASS	blocked
glob:// /root/*	blocked	PASS	blocked
phar:// write test	n/a	N/A	self-target — not a cross-tenant probe
chdir + ../ escape	blocked	PASS	blocked
realpath() outside basedir	null	PASS	blocked

6) disable_functions & command execution

Function	State	Status	Note
exec	disabled	PASS
shell_exec	disabled	PASS
system	disabled	PASS
passthru	disabled	PASS
proc_open	disabled	PASS
popen	disabled	PASS
pcntl_exec	disabled	PASS
mail	ENABLED	PASS
imap_open	disabled	PASS
dl	disabled	PASS
putenv	ENABLED	PASS
posix_kill	disabled	PASS
posix_setuid	disabled	PASS
posix_seteuid	disabled	PASS
actual `id` output	(no exec function produced output)	PASS	all exec attempts blocked

7) /proc enumeration

Check	Value	Status	Note
list /proc	denied	PASS	blocked
read /proc/self/status	denied	PASS	blocked
read /proc/<PID>/environ or cmdline of other PIDs	none	PASS	blocked

8) Privilege escalation / FPM socket impersonation

Probe	Result	Status	Note
posix_setuid(0)	disabled	PASS	expected to fail
posix_seteuid(0)	disabled	PASS	expected to fail
list /run *.sock	denied/none	PASS	blocked
connect to foreign FPM socket	n/a	N/A	nothing foreign to test against

raw php config

Setting	Value
open_basedir	/home/quantsite1992473113/:/usr/share/
disable_functions	pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,passthru,shell_exec,system,proc_open,proc_close,proc_get_status,proc_nice,proc_terminate,popen,dl,show_source,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
upload_tmp_dir	/home/quantsite1992473113/tmp
sys_temp_dir	/home/quantsite1992473113/tmp
session.save_path	/home/quantsite1992473113/tmp/sessions
sendmail_path	/usr/sbin/sendmail -t -i

loaded php extensions

32 extension(s) loaded.

bz2                     filter                  litespeed               shmop
calendar                ftp                     mysqli                  SimpleXML
clos_ssa                gettext                 openssl                 SPL
Core                    gmp                     pcntl                   sqlite3
ctype                   hash                    pcre                    standard
curl                    iconv                   readline                tokenizer
date                    json                    Reflection              xml
exif                    libxml                  session                 zlib

Tip: deploy this same file to /home/bobi/... and visit both vhosts. Use ?action=plant on tenant A, then visit tenant B with ?other=quantsite1992473113 — section 4 should show all PASS.