Re: Restrict where PHP is Usable?

Richard Lynch wrote: > httpd.conf > php_value Engine Off or somesuch... > > -- > WARNING richard@zend.com address is an endangered species -- Use > ceo@l-i-e.com > Wanna help me out? Like Music? Buy a CD: > http://l-i-e.com/artists.htm > Volunteer a little time: http://chatmusic.com/volunteer.htm its "php_flag engine off" --- You might be interested in this too: Copied from http://www.php.net/manual/en/features.safe-mode.php If you do virutal hosting, you can turn safe mode on and off for different Apache Virutal Hosts using the php_admin_value directive. This also allows you to have customised maximum execution times, disabled functions, etc. By placeing a base_dir for each virutal host, this means PHP CANNOT access files below this heirachy; strongly recoomended for cutsomer hosting. Eg: [VirtualHost 127.0.0.1:80] DocumentRoot /var/www/html/safephphost/ ServerName safephp php_admin_value safe_mode 1 php_admin_value open_base_dir /var/www/html/safephphost/ php_admin_value sendmail_from phobo#paradise.net.nz [/VirtualHost] Siggy > ----- Original Message ----- > From: Matthew Walker <matt@mountaintopherbs.com> > Newsgroups: php.general > To: <php-general@lists.php.net> > Sent: Tuesday, October 02, 2001 4:30 PM > Subject: Restrict where PHP is Usable? > > >> I've seen this done before on servers, but I'm not sure how to do it. >> >> Is there a way to restrict PHP to certain directories, so that it can >> only be used by files within those directories? >> >> For example: I'm starting a web page hosting service, and I'd like to >> make it so that most users can't use PHP. They'll have to pay a (very >> small) monthly fee to have access to it. This is partly as a very loose >> security measure, so that not everyone has access to PHP. >> >> -- >> Matthew Walker >> Ecommerce Project Manager >> Mountain Top Herbs >> >> --- >> Outgoing mail is certified Virus Free. >> Checked by AVG anti-virus system (http://www.grisoft.com). >> Version: 6.0.282 / Virus Database: 150 - Release Date: 9/25/2001 >> >> > > -- Sigurd Magnusson Director www.totallydigital.co.nz