Posted by Curtis on 02/01/07 05:12

On Wed, 31 Jan 2007 03:40:08 -0800, Christoph Burschka
<christoph.burschka@rwth-aachen.de> wrote:

> The manual (http://de3.php.net/manual/en/features.safe-mode.php) says
> only this about safe_mode_exec_dir:
>
> > If PHP is used in safe mode, system() and the other functions
> > executing system programs refuse to start programs that are not in
> > this directory. You have to use / as directory separator on all
> > environments including Windows.
>
> But what effect does this variable actually have - will this directory
> automatically be the "local" directory for system calls?
>
> For example, if it is set to /home/php-safe, and this directory contains
> the program "helloworld.sh":
>
> Will this work?
>
> > system("/home/php-safe/helloworld.sh");
>
> And will this?
>
> > system("helloworld.sh");
>
> Also, if the program is not in this directory, but in the parent
> directory, will this be blocked as it should?
>
> > system("../helloworld.sh");
>

Safe mode is going to be removed, eventually. Why do you need it on?

--
Curtis, http://dyersweb.com

[Back to original message]