On Wed, Feb 02, 2005 at 11:23:23AM +1100, Nick Loeve wrote:
>
> >Rasmus Lerdorf wrote:
> >
> >>I don't actually see it as a per-script thing. Obviously the ini
> >>would be per-dir Apache configurable, but I see this as being
> >>something set across the board on a dedicated server that defines the
> >>security policy of that server.
> >
> Isn't that something you can use mod_security for? I don't know of the
> availability of that module on a standard host, but on a dedicated
> server you could install it.
There are other servers out there like apache and mod_security is not
installed on enough servers to call it 'standard'.
> Cheers
> Nick Loeve
Jan
--
Jan Kneschke http://jan.kneschke.de/
Perhaps you want to say 'thank you, jan': http://jk.123.org/wishlist/
--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php