Posted by J.O. Aho on 01/31/07 12:08

Christoph Burschka wrote:
> The manual (http://de3.php.net/manual/en/features.safe-mode.php) says
> only this about safe_mode_exec_dir:
>
> > If PHP is used in safe mode, system() and the other functions
> > executing system programs refuse to start programs that are not in
> > this directory. You have to use / as directory separator on all
> > environments including Windows.
>
> But what effect does this variable actually have - will this directory
> automatically be the "local" directory for system calls?
>
> For example, if it is set to /home/php-safe, and this directory contains
> the program "helloworld.sh":
>
> Will this work?
>
> > system("/home/php-safe/helloworld.sh");
>
> And will this?
>
> > system("helloworld.sh");
>
> Also, if the program is not in this directory, but in the parent
> directory, will this be blocked as it should?
>
> > system("../helloworld.sh");
>
I never used this myself, but I would guess system("/helloworld.sh"); would be
the right way to call the script.

Why not test?

--

//Aho

[Back to original message]