safe_mode behavior modification request
| From: | Olivier PRENANT | Date: | Thu, 01 Jan 1970 00:00:00 +0000 |
| Subject: | safe_mode behavior modification request | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-55727@lists.php.net to get a copy of this message | ||
Hi list,
I'd like to submit the problem I have and the idea to circonvent it.
I host web site. Those sites belong to different peapole (login)
Putting safe_mode on breaks the loading of any file in include_path
variable because there's no chances that they could belong to the script
owner. Therefore it breaks any common library anyone could you (like
phplib).
OTOH, setting safe_mode to Off is a real lack of security.
Suggestion:
Keep safe_mode the way it works EXCEPT for files in include_path and
tmp_path (for uploading...)
Now I don't know php 4 code so much that I can do it alone.
Does it sound a ood idea? Does it break something else ? Did I miss
something ??
Can you give me some pointers to do it??
TIA
--
Olivier PRENANT Tel: +33-5-61-50-97-00 (Work)
Quartier d'Harraud Turrou +33-5-61-50-97-01 (Fax)
31190 AUTERIVE +33-6-07-63-80-64 (GSM)
FRANCE Email: ohp@pyrenet.fr
------------------------------------------------------------------------------
Make your life a dream, make your dream a reality. (St Exupery)