From 92e1c9f103b3b4b7b1b8520e817c32b873d2b222 Mon Sep 17 00:00:00 2001
From: Nuno Lopes <nlopess@php.net>
Date: Wed, 31 Dec 2003 10:39:43 +0000
Subject: [PATCH] safe mode note

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@147556 c90b9560-bf6c-de11-be94-00142212c4b1
---
 reference/exec/functions/exec.xml        | 11 ++++++++++-
 reference/exec/functions/passthru.xml    | 11 ++++++++++-
 reference/exec/functions/system.xml      | 11 ++++++++++-
 reference/filesystem/functions/chgrp.xml |  3 ++-
 reference/filesystem/functions/chmod.xml | 12 +++++++++---
 reference/filesystem/functions/popen.xml | 11 ++++++++++-
 6 files changed, 51 insertions(+), 8 deletions(-)

diff --git a/reference/exec/functions/exec.xml b/reference/exec/functions/exec.xml
index 4f4af224af..e72933f46e 100644
--- a/reference/exec/functions/exec.xml
+++ b/reference/exec/functions/exec.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.6 $ -->
+<!-- $Revision: 1.7 $ -->
 <!-- splitted from ./en/functions/exec.xml, last change in rev 1.2 -->
   <refentry id="function.exec">
    <refnamediv>
@@ -56,6 +56,15 @@
       hang until the execution of the program ends.
      </para>
     </note>
+    <note>
+     <simpara>
+      When <link linkend="features.safe-mode">safe mode</link> is enabled, you
+      can only execute executables within the <link
+       linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>. For
+      practical reasons it's currently not allowed to have
+      <literal>..</literal> components in the path to the executable.
+     </simpara>
+    </note>
     <para>
      See also <function>system</function>,
      <function>passthru</function>, <function>popen</function>,
diff --git a/reference/exec/functions/passthru.xml b/reference/exec/functions/passthru.xml
index 0cb3d54013..3c902e7b1e 100644
--- a/reference/exec/functions/passthru.xml
+++ b/reference/exec/functions/passthru.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.2 $ -->
+<!-- $Revision: 1.3 $ -->
 <!-- splitted from ./en/functions/exec.xml, last change in rev 1.2 -->
   <refentry id="function.passthru">
    <refnamediv>
@@ -47,6 +47,15 @@
       hang until the execution of the program ends.
      </para>
     </note>
+    <note>
+     <simpara>
+      When <link linkend="features.safe-mode">safe mode</link> is enabled, you
+      can only execute executables within the <link
+       linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>. For
+      practical reasons it's currently not allowed to have
+      <literal>..</literal> components in the path to the executable.
+     </simpara>
+    </note>
     <para>
      See also <function>exec</function>, <function>system</function>,
      <function>popen</function>, <function>escapeshellcmd</function>,
diff --git a/reference/exec/functions/system.xml b/reference/exec/functions/system.xml
index c9d23fb000..646623fb31 100644
--- a/reference/exec/functions/system.xml
+++ b/reference/exec/functions/system.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.5 $ -->
+<!-- $Revision: 1.6 $ -->
 <!-- splitted from ./en/functions/exec.xml, last change in rev 1.24 -->
   <refentry id="function.system">
    <refnamediv>
@@ -75,6 +75,15 @@ echo '
       </programlisting>
      </example>
     </para>
+    <note>
+     <simpara>
+      When <link linkend="features.safe-mode">safe mode</link> is enabled, you
+      can only execute executables within the <link
+       linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>. For
+      practical reasons it's currently not allowed to have
+      <literal>..</literal> components in the path to the executable.
+     </simpara>
+    </note>
     <para>
      See also <function>exec</function>,
      <function>passthru</function>, <function>popen</function>,
diff --git a/reference/filesystem/functions/chgrp.xml b/reference/filesystem/functions/chgrp.xml
index d685f19d3f..047912b9d8 100644
--- a/reference/filesystem/functions/chgrp.xml
+++ b/reference/filesystem/functions/chgrp.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.5 $ -->
+<!-- $Revision: 1.6 $ -->
 <!-- splitted from ./en/functions/filesystem.xml, last change in rev 1.2 -->
   <refentry id="function.chgrp">
    <refnamediv>
@@ -22,6 +22,7 @@
     <para>
      &return.success;
     </para>
+    &note.no-remote;
     &note.sm.uidcheck;
     <para>
      See also <function>chown</function> and
diff --git a/reference/filesystem/functions/chmod.xml b/reference/filesystem/functions/chmod.xml
index 95e0884ded..3b81c4cb2e 100644
--- a/reference/filesystem/functions/chmod.xml
+++ b/reference/filesystem/functions/chmod.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.10 $ -->
+<!-- $Revision: 1.11 $ -->
 <!-- splitted from ./en/functions/filesystem.xml, last change in rev 1.2 -->
   <refentry id="function.chmod">
    <refnamediv>
@@ -79,9 +79,15 @@ chmod("/somedir/somefile", 0750);
       access.
      </para>
     </note>
-    
     &note.no-remote;
-
+    <note>
+     <simpara>
+      When <link linkend="features.safe-mode">safe mode</link> is enabled, PHP
+      checks whether the files or directories you are about to operate on have
+      the same UID (owner) as the script that is being executed. In addition,
+      you cannot set the SUID, SGID and sticky bits
+     </simpara>
+    </note>
     <para>
      See also <function>chown</function> and
      <function>chgrp</function>.
diff --git a/reference/filesystem/functions/popen.xml b/reference/filesystem/functions/popen.xml
index e8610e44ba..4a67b3a13b 100644
--- a/reference/filesystem/functions/popen.xml
+++ b/reference/filesystem/functions/popen.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.10 $ -->
+<!-- $Revision: 1.11 $ -->
 <!-- splitted from ./en/functions/filesystem.xml, last change in rev 1.2 -->
   <refentry id="function.popen">
    <refnamediv>
@@ -67,6 +67,15 @@ pclose($handle);
       </programlisting>
      </informalexample>
     </para>
+    <note>
+     <simpara>
+      When <link linkend="features.safe-mode">safe mode</link> is enabled, you
+      can only execute executables within the <link
+       linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>. For
+      practical reasons it's currently not allowed to have
+      <literal>..</literal> components in the path to the executable.
+     </simpara>
+    </note>
     <para>
      See also <function>pclose</function>, <function>fopen</function>,
      and <function>proc_open</function>.