On Wed, Feb 02, 2005 at 11:23:23AM +1100, Nick Loeve wrote: > > >Rasmus Lerdorf wrote: > > > >>I don't actually see it as a per-script thing. Obviously the ini > >>would be per-dir Apache configurable, but I see this as being > >>something set across the board on a dedicated server that defines the > >>security policy of that server. > > > Isn't that something you can use mod_security for? I don't know of the > availability of that module on a standard host, but on a dedicated > server you could install it.
There are other servers out there like apache and mod_security is not installed on enough servers to call it 'standard'. > Cheers > Nick Loeve Jan -- Jan Kneschke http://jan.kneschke.de/ Perhaps you want to say 'thank you, jan': http://jk.123.org/wishlist/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php