AW: [PHP-DEV] Re: PDM Meeting Notes
| From: | Matthias Pigulla | Date: | Fri, 25 Nov 2005 09:52:47 +0000 |
| Subject: | AW: [PHP-DEV] Re: PDM Meeting Notes | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-20350@lists.php.net to get a copy of this message | ||
> > Well, safe_mode could prevent someone of doing a shell_exec("cat
> > /home/otheruser/web/config.php"); open_basedir can't do the same
> > thing.
> >
> disabled_functions=shell_exec, etc....
But safe_mode is more safe because it disables these functions
altogether? It's difficult to maintain a complete list of "bad"
functions in php.ini.
-mp.