Re: ini_set() security question
| From: | Richard Lynch | Date: | Wed, 30 May 2007 19:54:23 +0000 |
| Subject: | Re: ini_set() security question | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-255854@lists.php.net to get a copy of this message | ||
On Wed, May 30, 2007 2:44 pm, Samuel Vogel wrote:
>>> I would like to allow the users to ini_set(), while disabling the
>>> risky
>>> options with php_admin_flag/value!
>>>
>>
>> I don't think php_admin_* can be over-ridden -- that's kinda the
>> whole
>> point of that.
>
> The Problem is, that i can be overwritten using ini_set()...
> I just found that out by testing it and now I don't even have to worry
> about what options to disable, because I can't disable any of them :(
>
> Any thoughts on that?
Show us your test code?
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?