Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
there might be ways of bypassing it. > Adding more to these > 'features' when real support is already avaliable seems highly counter > productive IMO. > > Ilia Cheers, Boulat -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
erformance? However, if you do decide to keep those since "the alternatives at the web server and OS levels aren't very realistic, many people, especially ISP's, use safe mode " why not improve open_basedir, safe_mode, etc.. security options making PHP even more popular and rob

Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
hings as well. I haven't thought through this very > much yet, but that seems like a more flexible approach to this problem. the beauty of open source... ;) Cheers, Boulat. > > -Rasmus > -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
> On March 19, 2004 01:19 pm, [EMAIL PROTECTED] wrote: >> Bingo, I have too many clients to add them all, instead determining the >> value on the fly is the best way to go IMHO. > > If you have many clients you probably should've automated the account > creation > process and modification of all th

Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
e" I can create a patch for testing for any other php tree if needed. Cheers, Boulat. > > On March 19, 2004 12:48 pm, [EMAIL PROTECTED] wrote: >> Hi internals, >> >> I added "virtual_root_level" new security related directive >> into php-4.3.4. >>

Re: [PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
t; On Fri, 19 Mar 2004 [EMAIL PROTECTED] wrote: > >> Hi internals, >> >> I added "virtual_root_level" new security related directive >> into php-4.3.4. >> >> Full description with the patch can be found in here >> >> http://www.boulat.net/proj

[PHP-DEV] new security related directive for php-4.3.4

2004-03-19 Thread boulat
Hi internals, I added "virtual_root_level" new security related directive into php-4.3.4. Full description with the patch can be found in here http://www.boulat.net/projects/virtual_root_level/ Some feedback/comments would be appreciated. Regards, Boulat -- PHP Internals - P