Re: ini_set() security question

From:	Samuel Vogel	Date:	Fri, 01 Jun 2007 15:13:10 +0000
Subject:	Re: ini_set() security question
References:	1 2 3 4 5 6 7 8 9 10	Groups:	php.general
Request:	Send a blank email to php-general+get-255969@lists.php.net to get a copy of this message

I just tried it with php 5.2.3. Same behavior! Do you agree that overwriting the value shouldn't be possible with ini_set() ? I will file a bug report! Richard Lynch schrieb:

File a bug report then, and see what happens... But you may want to test with most recent versions if you are not already on current PHP versions. On Thu, May 31, 2007 2:46 pm, Samuel Vogel wrote:
There is no bug filed for this. There is only one older bug ( http://bugs.php.net/bug.php?id=38804 ) which makes me think overwriting with ini_set() shouldn't be possible! Richard Lynch schrieb:
    On Wed, May 30, 2007 3:34 pm, Samuel Vogel wrote:
      And what happens if you try to allocate 3M of data?
$foo = str_repeat('.', 3145728);
          
Nothing. It does it without any errors. I can allocate up to 20MB (well a little bit less of course).
        

Check http://bugs.php.net and see if it's a known issue or an exception to the php_admin_* rule or...