Posted by Christoph Burschka on 01/31/07 11:40

The manual (http://de3.php.net/manual/en/features.safe-mode.php) says
only this about safe_mode_exec_dir:

> If PHP is used in safe mode, system() and the other functions
> executing system programs refuse to start programs that are not in
> this directory. You have to use / as directory separator on all
> environments including Windows.

But what effect does this variable actually have - will this directory
automatically be the "local" directory for system calls?

For example, if it is set to /home/php-safe, and this directory contains
the program "helloworld.sh":

Will this work?

> system("/home/php-safe/helloworld.sh");

And will this?

> system("helloworld.sh");

Also, if the program is not in this directory, but in the parent
directory, will this be blocked as it should?

> system("../helloworld.sh");

--
CB

[Back to original message]