Re: [PHP3] Security: suexec wrapper

From: Date: Thu, 01 Jan 1970 00:00:00 +0000
Subject: Re: [PHP3] Security: suexec wrapper
References: 1  Groups: php.dev 
Request: Send a blank email to php-dev+get-2484@lists.php.net to get a copy of this message
(Note, moved this to php-dev) > From the guy actually coding: > > > exec.c has popen's in it, and certainly appears the place to put > > the magic, I just want to confirm that I don't need to worry about > > the popen in control_structures_inline.h ? Also that apache > > doesn't have a mechanism for calling things which php3 uses? The one in control_structures_inline.h is for executing commands in Backtick exec's are not allowed in safe mode anyway, so you should be ok leaving that one alone. I am not sure what he means with the second part of that question. Apache doesn't call stuff in PHP beyond the module entry function and a cleanup function. -Rasmus -- PHP Development Mailing List http://www.php.net/ To unsubscribe send an empty message to php-dev-unsubscribe@lists.php.net For help: php-dev-help@lists.php.net

« previous php.dev (#2484) next »