Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:31920
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 64.233.162.226 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=X2HeiKHkRtdjxf3tJqSOSqIqM/JfQjBAqLyNHgsSXOJ7yDgqCnca6HZtKIjLVbsCffReapY7bMTCaDZ4Es08qSnX3I3hTlAgdFxbJsK22A6n0RDEcVsB+6gcvG5ImUUW1UYZZ6sd/SUuKZuVW7kmNISPLObP2CBB+iAPnnezM8A=
Message-ID: <ffa0ace80708261557w2d29a704p7bf6752c8c9ccdca@mail.gmail.com>
Date: Sun, 26 Aug 2007 17:57:37 -0500
To: internals@lists.php.net
In-Reply-To: <36266.98.193.37.55.1188164291.squirrel@www.l-i-e.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <20070826193146.GQ16782@arvo.suso.org>
	 <36266.98.193.37.55.1188164291.squirrel@www.l-i-e.com>
Subject: Re: [PHP-DEV] Safe mode being removed in PHP6?
From: nlgordon@gmail.com ("Nate Gordon")

On 8/26/07, Richard Lynch <ceo@l-i-e.com> wrote:
>
> First make sure you understand what safe_mode does, and doesn't do,
> and just how lame it is at what it tried to do, and fails to do, and
> simply cannot do.

I am all for the removal of safe mode in php.  I use safe_mode now,
but I patch it to effectively only do function disabling.  My hosting
setup is mixed between code I write, and code I host.  So some of my
virtual hosts are given full run of the server, while other hosts are
limited to their little box.  The disable_functions ini_setting would
be able to accomplish this task perfectly, except that it is not per
virtual host.  If that was changed all my needs would be covered.

I would look to more OS type solutions, but unfortunately I run
everything off of AFS (read as non-standard unix fs with weird issues
in "becoming" a different user per vhost).

-- 
-Nathan Gordon

If the database server goes down and there is no code to hear it, does
it really go down?
<esc>:wq<CR>