Re: new security related directive for php-4.3.4

On Fri, 19 Mar 2004, Ilia Alshanetsky wrote: > On March 19, 2004 04:05 pm, you wrote: > > If you are using open_basedir at all, you have already given up all hope > > of any sort of performance. > > Certainly, but this would make the existing situation much worse then it > already is. Ideally fastcgi or ap2 should be used where it is possible to > make the web server processes run under the user's account hence avoiding the > needed for open_basedir, safe_mode, etc... all together. The code could easily be written such that there is virtually no performance degradation unless the dir actually contains a {} component, so I don't buy that argument. We are always trading convenience for performance here. -Rasmus