Re: [PHP3] Security: suexec wrapper
| From: | Rasmus Lerdorf | Date: | Thu, 01 Jan 1970 00:00:00 +0000 |
| Subject: | Re: [PHP3] Security: suexec wrapper | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-2484@lists.php.net to get a copy of this message | ||
(Note, moved this to php-dev)
> From the guy actually coding:
>
> > exec.c has popen's in it, and certainly appears the place to put
> > the magic, I just want to confirm that I don't need to worry about
> > the popen in control_structures_inline.h ? Also that apache
> > doesn't have a mechanism for calling things which php3 uses?
The one in control_structures_inline.h is for executing commands in
Backtick exec's are not allowed in safe mode anyway, so you should be ok
leaving that one alone.
I am not sure what he means with the second part of that question. Apache
doesn't call stuff in PHP beyond the module entry function and a cleanup
function.
-Rasmus
--
PHP Development Mailing List http://www.php.net/
To unsubscribe send an empty message to php-dev-unsubscribe@lists.php.net
For help: php-dev-help@lists.php.net