Re: Allowing [SAPI=] entries in ini files.
| From: | Michael Wallner | Date: | Wed, 20 Nov 2013 09:58:14 +0000 |
| Subject: | Re: Allowing [SAPI=] entries in ini files. | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-70219@lists.php.net to get a copy of this message | ||
On 19 November 2013 19:51, Sebastian Krebs <krebs.seb@gmail.com> wrote:
> Just my 2 cents, but that sounds more like an issue with your
> provider/hoster and not with PHP. I always thought of the additional
> php.ini as a way to change some details and not a way to set up the whole
> runtime. Especially when a user has write access to that file it seems to
> me also an security issue, when PHP allows to set/change critical settings
> there.
You totally miss the point, Sebastian. As Richard already explained in
his example, he as access to the ini-scan-dir, so he could set
whatever setting he wants, just not SAPI-specific, but for all SAPIs.
--
Regards,
Mike