[PHP-DEV] patch - adds new setting safe_mode_hide_env_vars From: Jason Greene (jason <email protected>)
Date: 10/20/00

If you guys could take a look at this patch, and see what you think. This allows for an ini setting that will block specified
environmental variables from being seen by php scripts. It does make one update that probably should be moved, and that is in
php_module_startup. Since this uses a hashtable datatype, zend_hash_init needs to be called. You guys probably don't want this in
the main startup, but I figured that you could let me know where it could go best. Maybe a startup call in safe_mode.c?

I know we had discussions about doing an env -i before running apache, and I do agree on cleaning the apache users environment, but
there is always the possibility of env vars you can't remove. (LD_LIBRARY_PATH) .

If you like the idea, but want things in different places let me know

-Jason

begin 666 safe-hide-env-basic_functions.c.diff
M26YD97 <email protected>(&)A<VEC7V9U;F-T:6]N<RYC#0H]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]#0I20U, <email protected>@+W)E<&]S:71O<GDO<&AP-"]E>'0O<W1A;F1A<F0O
M8F%S:6-?9G5N8W1I;VYS+F,L= <email protected>*<F5T<FEE=FEN9R!R979I<VEO;B Q+C(V
M-PT*9&EF9B M=2 M<C$N,C8W(&)A<VEC7V9U;F-T:6]N<RYC#0HM+2T <email protected>%S
M:6-?9G5N8W1I;VYS+F,),C P,"\Q,"\Q-B R,CHQ,CHR. DQ+C(V-PT**RLK
M(&)A<VEC7V9U;F-T:6]N<RYC"3(P,# O,3 O,C @,C Z-3DZ-#4-"D! ("TY
M,38L-R K.3$V+#$P($! #0H@"0E215154DY?1D%,4T4[#0H@"7T-"B )#0HM
M"0T**PEI9B H4$<H<V%F95]M;V1E*2 F)B H>F5N9%]H87-H7V5X:7-T<R <email protected>
M4$<H<VU?:&ED95]E;G9?=F%R<RDL(" <email protected><W1R*2T^=F%L=64N<W1R+G9A;"P@
M*"IS='(I+3YV86QU92YS='(N;&5N*2DI('L-"BL)"5)%5%523E]&04Q313L-
M"BL)?0T**PT*( EP='(@/2!S87!I7V=E=&5N=B <email protected>*G-T<BDM/G9A;'5E+G-T
M<BYV86PL(" <email protected><W1R*2T^=F%L=64N<W1R+FQE;BD[#0H@"6EF(" <email protected><'1R*2![
K#0H@"0EP='(@/2!G971E;G8H*"IS='(I+3YV86QU92YS='(N=F%L*3L-"@``
`
end

begin 666 safe-hide-env-main.c.diff
M26YD97 <email protected>(&UA:6XN8PT*/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/0T*4D-3(&9I
M;&4Z("]R97!O<VET;W)Y+W!H<#0O;6%I;B]M86EN+F,L= <email protected>*<F5T<FEE=FEN
M9R!R979I<VEO;B Q+C,R- <email protected>*9&EF9B M=2 M<C$N,S(V(&UA:6XN8PT*+2TM
M(&UA:6XN8PDR,# P+S$P+S(P(#$X.C(U.C$V"3$N,S(V#0HK*RL@;6%I;BYC
M"3(P,# O,3 O,C @,C Z-3(Z,3,-"D! ("TQ-S4L-B K,3<U+#(S($! #0H@
M"7)E='5R;B!354-#15-3.PT*('T-"B -"BMS=&%T:6, <email protected>$A07TE.25]-2"A/
M;E5P9&%T95-A9F5-;V1E2&ED945N=E9A<G,I#0HK>PT**PEC:&%R("IH:61E
M7W9A<G,L("IH:61E7W9A<CL-"BL):6YT(&1U;6UY/3$[#0HK"5!,4U]&151#
M2" <email protected>**PT**PEH:61E7W9A<G,@/2!E<W1R;F1U<"AN97=?=F%L=64L(&YE
M=U]V86QU95]L96YG=& <email protected>**PEZ96YD7VAA<VA?8VQE86XH)E!'*'-M7VAI
M9&5?96YV7W9A<G,I*3L-"BL@#0HK"6AI9&5?=F%R/7-T<G1O:RAH:61E7W9A
M<G,L("(L("(I.PT**PEW:&EL92 H:&ED95]V87(I('L-"BL)"7IE;F1?:&%S
M:%]U<&1A=&4H)E!'*'-M7VAI9&5?96YV7W9A<G,I+"!H:61E7W9A<BP@<W1R
M;&5N*&AI9&5?=F%R*2P@)F1U;6UY+"!S:7IE;V8H:6YT*2P <email protected>,3"D[#0HK
M"0EH:61E7W9A<CUS=')T;VLH3E5,3"P@(BP@(BD[#0HK"7T-"BL)969R964H
M:&ED95]V87)S*3L-"BL)<F5T=7)N(%-50T-%4U,[#0HK?0T*( T*("\J($YE
M960@=&\ <email protected>]N=F5R="!T;R!S=')I;F=S(&%N9"!M86ME('5S92!O9CH-"B @
M*B!$149!54Q47U-(3U)47T]014Y?5$%'#0I 0" M,C8Q+#<@*S(W."PW($!
M#0H@"5!(4%])3DE?14Y44EDH(G-E;F1M86EL7W!A=& <email protected>+ E$149!54Q47U-%
M3D1-04E,7U!!5$ <email protected>"5!(4%])3DE?4UE35$5-+ D)3E5,3"D-"B -"B )4$A0
M7TE.25]%3E1262 <email protected>&ES86)L95]F=6YC=&EO;G,B+ D)"2(B+ D)"5!(4%])
M3DE?4UE35$5-+ D)3E5,3"D-"BT-"BL)4$A07TE.25]%3E1262 <email protected><V%F95]M
M;V1E7VAI9&5?96YV7W9A<G,B+ D)(B(L(" @( D)"5!(4%])3DE?4UE35$5-
M+ E/;E5P9&%T95-A9F5-;V1E2&ED945N=E9A<G,I#0H@"5-41%]02%!?24Y)
M7T5.5%)9*")A;&QO=U]U<FQ?9F]P96XB+ D)(C$B+ D)4$A07TE.25]!3$PL
M"0E/;E5P9&%T94)O;VPL"0D)86QL;W=?=7)L7V9O<&5N+ D)"7!H<%]C;W)E
M7V=L;V)A;',L"6-O<F5?9VQO8F%L<RD-"B -"B!02%!?24Y)7T5.1" <email protected>#0I
M0" M.#8Y+#8@*S <email protected>,"! 0 T*( D)<&AP7W!R:6YT9B <email protected>$A0.B  <email protected>
M8FQE('1O(&EN:71I86QI>F4 <email protected>]P96X@=7)L('=R87!P97)S+EQN(BD[#0H@
M"0ER971U<FX <email protected>%)3%5213L-"B )?0T**R @(" @(" @(" @(" -"BL)+RH@
M5&AI<R!I;FET:6%L:7IE<R!T:&4@<V%F92!M;V1E(&AI9&4 <email protected>:7)O;FUE
M;G0@:&%S: T**PD@("!)="!S:&]U;&0@<')O8F%B;'D <email protected>@;6]V960@=&\@
M82!U;FEQ=64@<W1A<G1U<"!A<F5A("HO#0HK(" @"7IE;F1?:&%S:%]I;FET
M*"901RAS;5]H:61E7V5N=E]V87)S*2P <email protected> <email protected>,3"P <email protected>,3"P@,2D[#0H@
M#0H@"7IU=BYI;7!O<G1?=7-E7V5X=&5N<VEO;B ]("(N<&AP(CL-"B )>F5N
=9%]S971?=71I;&ET>5]V86QU97,H)GIU=BD[#0H`
`
end

begin 666 safe-hide-env-php_globals.h.diff
M26YD97 <email protected>('!H<%]G;&]B86QS+F <email protected>"CT]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T-
M"E)#4R!F:6QE.B O<F5P;W-I=&]R>2]P:' T+VUA:6XO<&AP7V=L;V)A;',N
M:"QV#0IR971R:65V:6YG(')E=FES:6]N(#$N-3 <email protected>"F1I9F8@+74@+7(Q+C4X
M('!H<%]G;&]B86QS+F <email protected>"BTM+2!P:'!?9VQO8F%L<RYH"3(P,# O,3 O,3,@
M,# Z,#DZ,S$),2XU. T**RLK('!H<%]G;&]B86QS+F@),C P,"\Q,"\R," R
M,#HU,SHT- T*0$ @+3DU+#<@*SDU+#@ <email protected>$ -"B )8VAA<B J=F%R:6%B;&5S
M7V]R9&5R.PT*( T*( E(87-H5&%B;&4@<F9C,3 <email protected>]P<F]T96-T961?=F%R
M:6%B;&5S.PT*+0T**PE(87-H5&%B;&4@<VU?:&ED95]E;G9?=F%R<SL-"BL@
M(" -"B )<VAO<G0 <email protected>]N;F5C=&EO;E]S=&%T=7,[#0H@"7-H;W)T(&EG;F]R
295]U<V5R7V%B;W)T.PT*( T*
`
end

begin 666 safe-hide-env-php_variables.c.diff
M26YD97 <email protected>('!H<%]V87)I86)L97,N8PT*/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/0T*4D-3(&9I;&4Z("]R97!O<VET;W)Y+W!H<#0O;6%I;B]P:'!?=F%R:6%B
M;&5S+F,L= <email protected>*<F5T<FEE=FEN9R!R979I<VEO;B Q+C$W#0ID:69F("UU("UR
M,2XQ-R!P:'!?=F%R:6%B;&5S+F,-"BTM+2!P:'!?=F%R:6%B;&5S+F,),C P
M,"\P.2\Q,2 Q-#HU,#HR- <email protected>+C$W#0HK*RL@<&AP7W9A<FEA8FQE<RYC"3(P
M,# O,3 O,C @,C Z-30Z,3 <email protected>"D! ("TS,34L-B K,S$U+#$Q($! #0H@"0EI
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M92AT+"!P*S$L(&%R<F%Y7W!T<B!%3%-?0T, <email protected>$Q37T-#*3L-"B )"65F<F5E
&*'0I.PT*
`
end 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>