PHP4 cURL functions bypass open_basedir protection allowing users to navigate through the filesystem.