Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:70223
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.42 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CALtuQzBPNmmCBNAC-U63z10Zpuj_4Q+fBWz5nziYTU+kA_2LRw@mail.gmail.com>
References: <CAKUjMCWacU8UyGE6yRBPLMQJPgt-qjkD9_FRBgoOS8xHhxSZjA@mail.gmail.com>
	<CALtuQzBJ_a3hDog5jAb5qzw5CtLPkj2AMGw88y40qdSGbW4NFA@mail.gmail.com>
	<CALJZF3hYEQCzadZ3cw=hj0Wq0TNCram=i1vpkJJCWxW7J7zy-A@mail.gmail.com>
	<CALtuQzBPNmmCBNAC-U63z10Zpuj_4Q+fBWz5nziYTU+kA_2LRw@mail.gmail.com>
Date: Wed, 20 Nov 2013 11:22:08 +0100
Message-ID: <CAEZPtU7qykeh-C+f4ADscPSOMVEMRJceYz34-__bQvCxH_pD5g@mail.gmail.com>
To: Sebastian Krebs <krebs.seb@gmail.com>
Cc: Michael Wallner <mike@php.net>, Richard Quadling <RQuadling@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Allowing [SAPI=] entries in ini files.
From: pierre.php@gmail.com (Pierre Joye)

On Wed, Nov 20, 2013 at 11:06 AM, Sebastian Krebs <krebs.seb@gmail.com> wrote:
> 2013/11/20 Michael Wallner <mike@php.net>
>
>> On 19 November 2013 19:51, Sebastian Krebs <krebs.seb@gmail.com> wrote:
>>
>> > Just my 2 cents, but that sounds more like an issue with your
>> > provider/hoster and not with PHP. I always thought of the additional
>> > php.ini as a way to change some details and not a way to set up the whole
>> > runtime. Especially when a user has write access to that file it seems to
>> > me also an security issue, when PHP allows to set/change critical
>> settings
>> > there.
>>
>> You totally miss the point, Sebastian. As Richard already explained in
>> his example, he as access to the ini-scan-dir, so he could set
>> whatever setting he wants, just not SAPI-specific, but for all SAPIs.
>>
>
> OK, but that doesn't change my opinion, that this in the hosters
> responsibility, what he provides and what not.

INI sections allow one to customize directories settings and having
this feature to do some other settings based on the SAPI looks like a
good complement.

Obviously shared hosted applications are not the target for such
features as they usually do not have access to php.ini but .htacess or
.user.ini only.

Cheers,
-- 
Pierre

@pierrejoye | http://www.libgd.org