> > Well, safe_mode could prevent someone of doing a shell_exec("cat 
> > /home/otheruser/web/config.php"); open_basedir can't do the same 
> > thing.
> > 
> disabled_functions=shell_exec, etc....

But safe_mode is more safe because it disables these functions
altogether? It's difficult to maintain a complete list of "bad"
functions in php.ini.

-mp.

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to