Re: [PHP-DEV] ENFORCE_SAFE_MODE From: Andi Gutmans (andi <email protected>)
Date: 08/30/00

Any idea why the Zend fopen_wrapper() uses IGNORE_URL_WIN?
Aren't URL's supposed to work in Windows?

Andi

At 01:06 PM 8/30/00 -0700, Rasmus Lerdorf wrote:
> > I am getting rid of it and am only checking PG(safe_mode) in
> > fopen-wrappers.c. This should make the safe_mode much much safer from now
> > on (at least the code that uses the php_fopen_wrappers()). I have heard in
> > the past that some extension modules might want to open some system fonts
> > and stuff so you wouldn't want to enable safe mode for those modules but I
> > think it's a bad explanation. You could probably use those extensions to
> > open /etc/passwd and maybe even get some kind of info back by chance.
> > If anyone thinks I'll break something badly scream now!
>
>Whether it is a bad explanation or not, you will break the GD extension as
>I explained before.
>
>-Rasmus
>
>
>--
>PHP Development Mailing List <http://www.php.net/>
>To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
>For additional commands, e-mail: php-dev-help <email protected>
>To contact the list administrators, e-mail: php-list-admin <email protected> 

---
Andi Gutmans <andi <email protected>>
http://www.zend.com/

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>