note 15781 added to security

If you do virutal hosting, you can turn safe mode on and off for different Apache Virutal Hosts using the php_admin_value directive. This also allows you to have customised maximum execution times, disabled functions, etc; anything which is set in php.ini. Note that by placing a base_dir for each virutal host, this means PHP CANNOT access files below this heirachy; strongly recomended for customer hosting. Example (httpd.conf): [VirtualHost 127.0.0.1:80] DocumentRoot /var/www/html/safephphost/ ServerName safephp php_admin_value safe_mode 1 php_admin_value open_base_dir /var/www/html/safephphost/ php_admin_value sendmail_from phobo#paradise.net.nz [/VirtualHost] Am not sure which versions this started working with but does with Apache 1.3.19/PHP4.04pl1. -- http://www.php.net/manual/en/security.php http://master.php.net/manage/user-notes.php?action=edit+15781 http://master.php.net/manage/user-notes.php?action=delete+15781 http://master.php.net/manage/user-notes.php?action=reject+15781