Re: ini_set() security question
| From: | Samuel Vogel | Date: | Wed, 30 May 2007 19:44:42 +0000 |
| Subject: | Re: ini_set() security question | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-255851@lists.php.net to get a copy of this message | ||
Hello,
The Problem is, that i can be overwritten using ini_set()... I just found that out by testing it and now I don't even have to worry about what options to disable, because I can't disable any of them :( Any thoughts on that? Regards, SamyI would like to allow the users to ini_set(), while disabling the risky options with php_admin_flag/value!I don't think php_admin_* can be over-ridden -- that's kinda the whole point of that.