Re: [PHP] safe mode bug ?

2004-06-07 Thread Emmanuel Lacour
On Sun, Jun 06, 2004 at 03:03:00PM +0200, Andreas John wrote: Hi! There are 2.5 possibilities that make sense. a.) mod_suphp [Any volunteers to put that into debian tree??:-)] www.suphp.org I've got preliminary packages for it (with an ITP). I'm going to put it somewhere and I'm able

Re: [PHP] safe mode bug ?

2004-06-07 Thread Michal Panoch
Robert Hensel [EMAIL PROTECTED] writes: Hi, I understand that there are a lot of solutions to make PHP more safe. And of course,I don't see safe_mode as _the_ solution. But I definetly consider it to be a good extra protection, just like basedir restrictions, and the problem I described

Re: [PHP] safe mode bug ?

2004-06-07 Thread Emmanuel Lacour
On Sun, Jun 06, 2004 at 03:03:00PM +0200, Andreas John wrote: Hi! There are 2.5 possibilities that make sense. a.) mod_suphp [Any volunteers to put that into debian tree??:-)] www.suphp.org I've got preliminary packages for it (with an ITP). I'm going to put it somewhere and I'm able

Re: [PHP] safe mode bug ?

2004-06-07 Thread Michal Panoch
Robert Hensel [EMAIL PROTECTED] writes: Hi, I understand that there are a lot of solutions to make PHP more safe. And of course,I don't see safe_mode as _the_ solution. But I definetly consider it to be a good extra protection, just like basedir restrictions, and the problem I described

[PHP] safe mode bug ?

2004-06-06 Thread Robert Hensel
Hi, I came upon a strange problem when trying to list directory's in safe mode as a normal user. Of course I expected this not to work, because safe_mode disables the possibility of reading files that not belong to the owner of the PHP-file. However, it does not seem to check for directory

Re: [PHP] safe mode bug ?

2004-06-06 Thread Franz Georg Khler
On So, Jun 06, 2004 at 02:36:13 +0200, Robert Hensel [EMAIL PROTECTED] wrote: Hi, I came upon a strange problem when trying to list directory's in safe mode as a normal user. Of course I expected this not to work, because safe_mode disables the possibility of reading files that not belong

Re: [PHP] safe mode bug ?

2004-06-06 Thread Andreas John
Hi! There are 2.5 possibilities that make sense. a.) mod_suphp [Any volunteers to put that into debian tree??:-)] www.suphp.org b.) Run php as cgi and attach she-bang (#!/path/to/pgp-cgi) c.) Run php as cgi and teach the environment to treat .php files like binaries with the binfmt kernel

Re: [PHP] safe mode bug ?

2004-06-06 Thread Robert Hensel
Hi, I understand that there are a lot of solutions to make PHP more safe. And of course,I don't see safe_mode as _the_ solution. But I definetly consider it to be a good extra protection, just like basedir restrictions, and the problem I described seems simply like a bug in safe_mode. Franz

Re: [PHP] safe mode bug ?

2004-06-06 Thread William Dode
Andreas John [EMAIL PROTECTED] writes: Hi! There are 2.5 possibilities that make sense. a.) mod_suphp [Any volunteers to put that into debian tree??:-)] www.suphp.org b.) Run php as cgi and attach she-bang (#!/path/to/pgp-cgi) c.) Run php as cgi and teach the environment to treat .php

[PHP] safe mode bug ?

2004-06-06 Thread Robert Hensel
Hi, I came upon a strange problem when trying to list directory's in safe mode as a normal user. Of course I expected this not to work, because safe_mode disables the possibility of reading files that not belong to the owner of the PHP-file. However, it does not seem to check for directory

Re: [PHP] safe mode bug ?

2004-06-06 Thread Franz Georg Khler
On So, Jun 06, 2004 at 02:36:13 +0200, Robert Hensel [EMAIL PROTECTED] wrote: Hi, I came upon a strange problem when trying to list directory's in safe mode as a normal user. Of course I expected this not to work, because safe_mode disables the possibility of reading files that not belong

Re: [PHP] safe mode bug ?

2004-06-06 Thread Andreas John
Hi! There are 2.5 possibilities that make sense. a.) mod_suphp [Any volunteers to put that into debian tree??:-)] www.suphp.org b.) Run php as cgi and attach she-bang (#!/path/to/pgp-cgi) c.) Run php as cgi and teach the environment to treat .php files like binaries with the binfmt kernel

Re: [PHP] safe mode bug ?

2004-06-06 Thread Robert Hensel
Hi, I understand that there are a lot of solutions to make PHP more safe. And of course,I don't see safe_mode as _the_ solution. But I definetly consider it to be a good extra protection, just like basedir restrictions, and the problem I described seems simply like a bug in safe_mode. Franz