Re: new security related directive for php-4.3.4
| From: | Rasmus Lerdorf | Date: | Fri, 19 Mar 2004 21:05:03 +0000 |
| Subject: | Re: new security related directive for php-4.3.4 | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-8622@lists.php.net to get a copy of this message | ||
On Fri, 19 Mar 2004, Ilia Alshanetsky wrote:
> As for Rasmus' idea of adding various options and possibly regular expression.
> open_basedir works right now with a minimum amount of overhead in most
> situations. Which still makes the file operations a fair bit slower, but
> certainly acceptable loss given the security benefits. However, adding more
> options, that would make open_basedir resolving quite a bit slower will
> quickly tip the scales in favor of performance. With complex file system
> operation checks, you certainly will not be able to host anywhere near 3000
> users.
If you are using open_basedir at all, you have already given up all hope
of any sort of performance.
-Rasmus