Re: Proper configuration of safe mode

mbneto wrote: > Hi Jochem, > > Thanks for the reply. > > What is wrong with my openbase_dir setting? I have no idea if there is anything wrong with it - I just missed that you had it at all! (yes I've already read the > manual - http://www.php.net/manual/en/features.safe-mode.php > <http://www.php.net/manual/en/features.safe-mode.php> - > before posting > my first message). > > Since safe mode will be deprecated what is (will be) the alternative? none (it disappears in php6) - well using CGI/fastCGI and running as the specific user in question is one way (I guess) but I have no experience using them. you will still have: open_basedir disable_functions disable_classes but read this page (again) http://php.net/features.safe-mode, the first paragraph explains why php shouldn't be doing the job safe_mode *tries* to tackle. ask yourself the question as to why you want/need safe_mode. you may be an ISP in which case there is probably good reason to wANt to use it, but realise safe_mode is not designed to protect the server from the outside world but to protect the servers' users from each other. > > On 7/12/06, *Jochem Maas* < jochem@iamjochem.com > <mailto:jochem@iamjochem.com>> wrote: > > mbneto wrote: > > Hi, > > > > I'd like to enable safe mode in my current setup but it seems that > I am > > doing something wrong. > > have a look at the open_base_dir ini setting. > IIRC safe_mode is being depreciated and will eventually be phased out. > > > > > I have configure a webmail (IMP) and I can access my messages fine > but when > > I try to send a new one I get error message in my log > > > > Jul 12 15:00:44 HORDE [error] [imp] sendmail > [/var/www/phpexecdir/sendmail] > > is not a valid file [on line 1042 of > "/var/www/html/horde/imp/compose.php"] > > > > My webserver configuration > > > > <Directory /var/www/html/horde/> > > php_admin_flag safe_mode On > > php_admin_value upload_tmp_dir > "/var/www/html/horde/tmp" > > php_admin_value safe_mode_include_dir > > "/usr/share/pear:/var/www/html/horde/" > > php_admin_value open_basedir > > ".:/usr/share/pear:/var/www/html/horde/" > > php_admin_value safe_mode_exec_dir > > "/var/www/phpexecdir/" > > </Directory> > > > > I have copied sendmail from it's original location to this new one. > > > > Any tips? > > > >