Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:8629 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 49589 invoked by uid 1010); 19 Mar 2004 22:06:28 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 49535 invoked from network); 19 Mar 2004 22:06:28 -0000 Received: from unknown (HELO jdi.jdimedia.nl) (212.204.192.51) by pb1.pair.com with SMTP; 19 Mar 2004 22:06:28 -0000 Received: from localhost (localhost [127.0.0.1]) by jdi.jdimedia.nl (8.12.10/8.12.10) with ESMTP id i2JM6Pvl014745; Fri, 19 Mar 2004 23:06:25 +0100 Date: Fri, 19 Mar 2004 23:06:25 +0100 (CET) X-X-Sender: derick@localhost To: Rasmus Lerdorf cc: PHP Developers Mailing List , boulat@funio.com In-Reply-To: Message-ID: References: <61700.66.158.132.127.1079718509.squirrel@www.funio.com> <200403191609.28127.ilia@prohost.org> <63849.66.158.132.127.1079731711.squirrel@www.funio.com> <200403191641.18788.ilia@prohost.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: Re: [PHP-DEV] new security related directive for php-4.3.4 From: derick@php.net (Derick Rethans) On Fri, 19 Mar 2004, Rasmus Lerdorf wrote: > On Fri, 19 Mar 2004, Ilia Alshanetsky wrote: > > > > Because it would break BC. When these options were developed Apache 2 was not > > around and fastcgi support was flimsy at best. Using plain CGI (which MANY > > ISPs use) to run PHP is quite resource intensive. > > Ilia, come back to reality man! Are you really suggesting that people use > Apache2 with the perchild MPM to solve this problem? There is also something as mod_suid: http://www.jdimedia.nl/igmar/mod_suid/ (note, Apache only starts as root, the requests are not handled as root of course). Derick