Bug #18407: Request of new configuration directive for safe_mode

From: msteinacher@websource.ch Operating system: Linux PHP version: 4.2.1 PHP Bug Type: Feature/Change Request Bug description: Request of new configuration directive for safe_mode I suggest to add a new configuration directive for safe mode to solve the common problem, that a user can't change uploaded files because they have the UID of the user owning the webserver process and not the UID of the user owning the script. I know that I could turn safe_mode off and use only open_basedir instead. Another 'solution' sould be to use safe_mode_gid and put the webserver-user in the same group as the script-owners. But I don't want to do this. Thus my suggestion to add a new directive that could for example be called 'safe_mode_allow_proc_uid'. If this is set to TRUE then PHP should allow the access to files which are owned by the user that owns the script (as it does now) _OR_ files which are owned by the user that owns the webserver process. In other words: Try to implement the patch at http://www.zend.com/lists/php-dev/200201/msg01149.html with the option to enable or disable it. Thanks for listening. Marco -- Edit bug report at http://bugs.php.net/?id=18407&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=18407&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=18407&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=18407&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=18407&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=18407&r=support Expected behavior: http://bugs.php.net/fix.php?id=18407&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=18407&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=18407&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=18407&r=globals