View Poll Results: Do you configure PHP in safe mode?
- Voters
- 11. You may not vote on this poll
-
Always
6 54.55% -
Never
4 36.36% -
Only if the client requests it
0 0% -
What the heck is safe mode?
1 9.09%
Results 1 to 4 of 4
-
11-12-2001, 11:11 PM #1Web Hosting Master
- Join Date
- Mar 2001
- Posts
- 1,297
Do you configure PHP in Safe mode?
How many of you configure PHP in Safe mode?
What about setting open_basedir?
-t
-
11-13-2001, 07:25 AM #2Web Hosting Guru
- Join Date
- Oct 2000
- Posts
- 337
Nope... we run PHP as a CGI, under suexec, which doesn't expose you to any more security vulnerabilities than any other script a user could upload.
That said, I'm looking forward to a release version of Apache 2.0 so we can offer PHP as a server module and still have scripts run with the user's permissions.
-
11-13-2001, 08:26 AM #3Web Hosting Master
- Join Date
- Mar 2001
- Posts
- 2,057
Yes, Apache 2.0 will be very interesting. BTW, has Covalent already released their commercial Apache 2.0?
-
11-13-2001, 08:28 AM #4Web Hosting Guru
- Join Date
- Oct 2000
- Posts
- 337
I believe they have, which is odd, given that Apache 2.0 hasn't hit release yet. I guess they figure it's good enough.