From 1fb26926d9029c4d0e0c59cb2f1cd2f274d5df63 Mon Sep 17 00:00:00 2001 From: Gabor Hojtsy Date: Sat, 22 Dec 2001 16:55:40 +0000 Subject: [PATCH] s/Safe Mode/safe mode/ as Jim corrected these in other places. Adding ini link to open_basedir git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@65965 c90b9560-bf6c-de11-be94-00142212c4b1 --- features/safe-mode.xml | 39 +++++++++++++++++++++------------------ 1 file changed, 21 insertions(+), 18 deletions(-) diff --git a/features/safe-mode.xml b/features/safe-mode.xml index e76d8d56ec..1e4ce54c50 100644 --- a/features/safe-mode.xml +++ b/features/safe-mode.xml @@ -1,16 +1,17 @@ - + Safe Mode - Safe Mode is an attempt to solve the shared-server security problem. It is - architecturally incorrect to try to solve this problem at the PHP level, - but since the alternatives at the web server and OS levels aren't very - realistic, many people, especially ISP's, use Safe Mode for now. + The PHP safe mode is an attempt to solve the shared-server security + problem. It is architecturally incorrect to try to solve this + problem at the PHP level, but since the alternatives at the web + server and OS levels aren't very realistic, many people, + especially ISP's, use safe mode for now. - The configuration directives that control Safe Mode are: + The configuration directives that control safe mode are: ]]> - results in this error when Safe Mode is enabled: + results in this error when safe mode is enabled: If instead of safe_mode, you set an - open_basedir directory then all file operations will be limited to files - under the specified directory. For example (Apache httpd.conf example): + open_basedir directory then all + file operations will be limited to files under the specified directory + For example (Apache httpd.conf example): @@ -59,8 +61,9 @@ allowed to access /etc/passwd owned by uid 0 in /docroot/script.php on line 2 ]]> - If you run the same script.php with this open_basedir setting then this is - the result: + If you run the same script.php with this + open_basedir setting + then this is the result: - Functions restricted/disabled by Safe Mode + Functions restricted/disabled by safe mode This is a still probably incomplete and possibly incorrect listing of the functions limited by - Safe Mode. + safe mode. - Safe Mode limited functions + Safe mode limited functions @@ -125,17 +128,17 @@ Warning: readfile() has been disabled for security reasons in ifx_* - sql_safe_mode restrictions, (!= Safe Mode) + sql_safe_mode restrictions, (!= safe mode) ingres_* - sql_safe_mode restrictions, (!= Safe Mode) + sql_safe_mode restrictions, (!= safe mode) mysql_* - sql_safe_mode restrictions, (!= Safe Mode) + sql_safe_mode restrictions, (!= safe mode) @@ -259,7 +262,7 @@ Warning: readfile() has been disabled for security reasons in getallheaders - In Safe Mode, headers beginning with 'authorization' + In safe mode, headers beginning with 'authorization' (case-insensitive) will not be returned. Warning: this is broken with the aol-server implementation of getallheaders!