Cristian Rodriguez R. wrote:

open_basedir and safe-mode are different, they serve and slightly
different purpose..

safe-mode is unfixable, it is broken by design and the only way to fix
was removing it, it causes more harm tha good, open_basedir has limited
value but is still useful..in PHP6 you can use it per application with
ini_set('open_basedir', '/foo/bar'); as long it is equally or more
restrictive than the one set "per dir" ( and this last one should be
equally or mor restrictive than the one defined in httpd.conf or php.ini)

Really ? I always thought open_basedir was a part of safemode.
Doing a search on php.net on open_basedir leads one to the safemode page http://php.net/manual/en/features.safe-mode.php whish lists open_basedir in the "*Security and Safe Mode Configuration Directives*" table, right down under the big "Safe Mode was removed in PHP 6.0.0." warning sign.

Best regards
Sylvester Lykkehus
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to