Re: ENFORCE_SAFE_MODE
| From: | Rasmus Lerdorf | Date: | Wed, 30 Aug 2000 20:06:57 +0000 |
| Subject: | Re: ENFORCE_SAFE_MODE | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-31301@lists.php.net to get a copy of this message | ||
> I am getting rid of it and am only checking PG(safe_mode) in
> fopen-wrappers.c. This should make the safe_mode much much safer from now
> on (at least the code that uses the php_fopen_wrappers()). I have heard in
> the past that some extension modules might want to open some system fonts
> and stuff so you wouldn't want to enable safe mode for those modules but I
> think it's a bad explanation. You could probably use those extensions to
> open /etc/passwd and maybe even get some kind of info back by chance.
> If anyone thinks I'll break something badly scream now!
Whether it is a bad explanation or not, you will break the GD extension as
I explained before.
-Rasmus