Re: why the damn phpinfo() is so talkative?

Thanks to all for your replies. Sorry, I've been mistaken. The variables don't compiled in php, as I see, they are exported from the shell. I made su to root and started apache (as I often do). Anyway, they are avauilable to the world, while they should not. I think that issue is mostly applied to apache and the OS behaviour, not to php itself. Maybe this issue should be described in documentation? While it's not a php problem, it pretends to be, while looking at phpinfo() output, and is definetily a security issue, which users should be aware of. -- Best regards, Max A. Derkachev mailto:kot@books.ru Symbol-Plus Publishing Ltd. phone: +7 (812) 265-0054, 265-1228, phone/fax: 567-8775 http://www.Books.Ru -- All Books of Russia