Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:70219
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.176 as permitted sender)
MIME-Version: 1.0
Sender: mike.php.net@gmail.com
In-Reply-To: <CALtuQzBJ_a3hDog5jAb5qzw5CtLPkj2AMGw88y40qdSGbW4NFA@mail.gmail.com>
References: <CAKUjMCWacU8UyGE6yRBPLMQJPgt-qjkD9_FRBgoOS8xHhxSZjA@mail.gmail.com>
	<CALtuQzBJ_a3hDog5jAb5qzw5CtLPkj2AMGw88y40qdSGbW4NFA@mail.gmail.com>
Date: Wed, 20 Nov 2013 10:58:14 +0100
Message-ID: <CALJZF3hYEQCzadZ3cw=hj0Wq0TNCram=i1vpkJJCWxW7J7zy-A@mail.gmail.com>
To: Sebastian Krebs <krebs.seb@gmail.com>
Cc: Richard Quadling <RQuadling@gmail.com>, PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Allowing [SAPI=] entries in ini files.
From: mike@php.net (Michael Wallner)

On 19 November 2013 19:51, Sebastian Krebs <krebs.seb@gmail.com> wrote:

> Just my 2 cents, but that sounds more like an issue with your
> provider/hoster and not with PHP. I always thought of the additional
> php.ini as a way to change some details and not a way to set up the whole
> runtime. Especially when a user has write access to that file it seems to
> me also an security issue, when PHP allows to set/change critical settings
> there.

You totally miss the point, Sebastian. As Richard already explained in
his example, he as access to the ini-scan-dir, so he could set
whatever setting he wants, just not SAPI-specific, but for all SAPIs.


-- 
Regards,
Mike