safe_mode not working with php-4.3.1
| From: | Stephen Grier | Date: | Fri, 07 Mar 2003 16:08:04 +0000 |
| Subject: | safe_mode not working with php-4.3.1 | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-138646@lists.php.net to get a copy of this message | ||
Hi all,
Has anyone noticed safe_mode not working correctly with php-4.3.1?
Until recently we have been running php-4.2.3 with safe_mode enabled to
host a multi-user public web server. Having upgraded to php-4.3.1 I
noticed that scripts can now access files on the file system owned by a
different UID/GID, which is supposed to be prohibited in safe_mode. If I
switch back to php-4.2.3, I get safe_mode restrictions as expected.
get_ini('safe_mode') shows that safe_mode is correctly enabled for
php-4.3.1.
Am I missing something with php-4.3.1, or should I stick with php-4.2.3?
--
Stephen Grier
Systems Developer
Computing Services
Queen Mary, University of London