ini_set() security question

From: Date: Tue, 29 May 2007 15:19:51 +0000
Subject: ini_set() security question
Groups: php.general 
Request: Send a blank email to php-general+get-255759@lists.php.net to get a copy of this message
I would be very interested in knowing which options, that are accessible with PHP_INI_ALL or PHP_INI_PERDIR, could be risky to allow on a shared hosting server. I would like to allow the users to ini_set(), while disabling the risky options with php_admin_flag/value! Stuff like 'memory_limit' and so on come to my mind! Does anybody have more infos on this? Regards, Samy

« previous php.general (#255759) next »