PHP4 config setting suggestion
| From: | Steve Edberg | Date: | Fri, 22 Dec 2000 11:49:00 +0000 |
| Subject: | PHP4 config setting suggestion | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-42118@lists.php.net to get a copy of this message | ||
Hi -
I was just salivating over PHP4.0.4 and got an idea for an addition to the config settings. Currently, you have a 'disable_functions' option; what would be REALLY cool would be to have an 'enable_functions' setting as well. That way, I could safely replace server-side includes with a small subset of PHP functions, on a directory-by-directory basis.
You could arrange it like Apache access control:
function_order "disable, enable"
function_disable all
function_enable "include, date, ereg, echo, print, getenv"
Since there's not likely to be functions named 'all' or 'none', those are probably safe as special values here. You could even allow wildcarding:
function_order "enable, disable"
function_enable all
function_disable mysql_* # Disallow mysql usage
As always, thanks for a stupendously-great, A-1 Acme four-star piece of software !
-steve
+--- "They've got a cherry pie there, that'll kill ya" ------------------+
| Steve Edberg University of California, Davis | | sbedberg@ucdavis.edu Computer Consultant | | http://aesric.ucdavis.edu/ http://pgfsun.ucdavis.edu/ |+-------------------------------------- FBI Special Agent Dale Cooper ---+