#19217 [Bgs]: safe_mode defaulting to "on", docs say "off"
ID: 19217
User updated by: roland@astrofoto.org
Reported By: roland@astrofoto.org
Status: Bogus
Bug Type: Documentation problem
Operating System: RedHat 7.2/Linux 2.4.9
PHP Version: 4.2.2
New Comment:
Doh! I'm an idiot. I'll plead sleep deprivation.
I did copy the config from 4.1.2 and didn't look close enough since
4.1.2 didn't enforce safe_mode for fopen().
Sorry to waste everyone's time....
Previous Comments:
------------------------------------------------------------------------
[2002-09-04 05:09:56] sniper@php.net
Your configure line. You're enabling it there.
--enable-safe-mode
Remove that, and it will be off.
------------------------------------------------------------------------
[2002-09-03 20:23:23] roland@astrofoto.org
I don't have a php.ini and PHP was compiled with the following
configure:
./configure --prefix=/usr --with-config-file-path=/etc
--disable-debug --enable-inline-optimization --with-apxs=/usr/sbin/apxs
--with-exec-dir=/usr/bin --with-regex=system --with-gettext --with-gd
--with-jpeg-dir=/usr --with-png --with-zlib --with-db2 --with-db3
--with-gdbm --enable-debugger --enable-magic-quotes --enable-safe-mode
--enable-sysvsem --enable-sysvshm --enable-track-vars --enable-yp
--enable-ftp --without-mysql --with-xml --with-pgsql --enable-bcmath
--enable-exif --enable-ctype
The only place anything appears that would set safe_mode is my newly
added php_admin_value setting.
Is there some other place I need to look?
------------------------------------------------------------------------
[2002-09-03 15:36:10] rasmus@php.net
Check your php.ini file or the compile flags on your particular
compiled version. The default is definitely still off in the code.
------------------------------------------------------------------------
[2002-09-03 15:33:50] roland@astrofoto.org
safe_mode is documented to default to "off". However, after an upgrade
from PHP 4.1.2 to 4.2.2, a call to
fopen ("/tmp/mkimg.log", "a");
began to fail. In order to correct the problem, I had to add a line
php_admin_value safe_mode off
to my Apache configuration. Note that this is Apache 1.3.22. The
webserver is an Apache virtual host distinguished by IP address.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=19217&edit=1
Thread (5 messages)