thewitt
11-12-2001, 11:11 PM
How many of you configure PHP in Safe mode?
What about setting open_basedir?
-t
What about setting open_basedir?
-t
 | View Full Version : Do you configure PHP in Safe mode? Travis 11-13-2001, 07:25 AM Nope... we run PHP as a CGI, under suexec, which doesn't expose you to any more security vulnerabilities than any other script a user could upload. That said, I'm looking forward to a release version of Apache 2.0 so we can offer PHP as a server module and still have scripts run with the user's permissions. Walter 11-13-2001, 08:26 AM Yes, Apache 2.0 will be very interesting. BTW, has Covalent already released their commercial Apache 2.0? Travis 11-13-2001, 08:28 AM I believe they have, which is odd, given that Apache 2.0 hasn't hit release yet. I guess they figure it's good enough. ;) |