Re: safe_mode and inclusion of files don't work as documented
| From: | Ben Dunlap | Date: | Tue, 01 Sep 2009 22:33:36 +0000 |
| Subject: | Re: safe_mode and inclusion of files don't work as documented | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-297588@lists.php.net to get a copy of this message | ||
> Safe mode is a bad idea. :) It's not safe; it may only have the effect
> of making you think you're safe. If you have a particular reason to
> use it then maybe it's OK, but just be aware that it will not exist in
> future versions of PHP and relying on it is not a good idea. Security,
> unfortunately, is not as simple as toggling a configuration variable.
Yes -- and I always look askance at shared-hosting providers who rely
on safe_mode and call it a security measure. Then when I'm done
looking askance, I take my business elsewhere.
Ben