Re: why the damn phpinfo() is so talkative? + answers

At 10:55 AM 10/20/00 +0300, Teodor Cimpoesu wrote:

Hi Jason! On Thu, 19 Oct 2000, Jason Greene wrote: I agree with what your saying, though I do agree that hosted customers seeing certain environment variables can be undesireable. What do you think about a safe mode ini setting that could block certain "sensative" vars from being read? there is already something like this, see: safe_mode_allowed_env_vars safe_mode_protected_env_vars options your php.ini.

I think it should be done on the user level like you pointed out below. We could put such a suggestion in the manual (to run with env -i).

As for the original post, when you start Apache it inherits all your environment, this is how the programs work least on *nix. If you don't want that, use the magic `env' program like this: # /usr/bin/env -i /opt/apache/sbin/httpd (with your env and httpd paths, of course). The -i options `clears' the environ so the httpd process starts w/o inheriting anything.

Andi --- Andi Gutmans <andi@zend.com> http://www.zend.com/