note 22311 added to security.apache

PHP installed as mod for Apache under Windows NT should not be owned by Administrator or any kind of such power user. If safe mode is not enabled, an EXEC() command will execute processes with security restrictions that apply to PHP.EXE file owner. By default -it is- the system Administrator. Taking ownership over PHP installation directory with more limited account may be a good solution. -- http://www.php.net/manual/en/security.apache.php http://master.php.net/manage/user-notes.php?action=edit+22311 http://master.php.net/manage/user-notes.php?action=delete+22311 http://master.php.net/manage/user-notes.php?action=reject+22311