php safemode on or off?

They have: 101 posts

Joined: Apr 2003

Is it better to turn it on? or off?
what are the risks if it's turned off?
and what things cant you do when it's turned on?

Thanks!!Confused

They have: 461 posts

Joined: Jul 2003

http://php.net willprobalby have the best info on that. from what i can tell it's strict with some things you can otherwise get away with among other things. i was toldby someone who seems to do a LOT with security, that if possible, you should always develop with it on. he went into why but i forget right now. it's somewhere on the devnet. if you don't wanna search, as neilsene directly.
http://forums.devnetwork.net/

POSIX. because a stable os that doesn't have memory leaks and isn't buggy is always good.

Mark Hensler's picture

He has: 4,048 posts

Joined: Aug 2000

Safe mode just makes sure you (or anyone else on the server) doesn't mess up the system.

More info here:
PHP Docs: Chapter 22. Safe Mode

They have: 101 posts

Joined: Apr 2003

http://www.phpfreaks.com/forums/topic5974.php

can you tell me whats going on?

Mark Hensler's picture

He has: 4,048 posts

Joined: Aug 2000

What's going on with the possible safe mode bug?

I wasn't aware of this 'till looking at you link. I appears that when safe mode is enabled, it is not properly checking permissions and paths before including files. As Michal Krause said in his report, "This behaviour could make older working setups insecure after upgrading to PHP 4.3.x."

Mark Hensler
If there is no answer on Google, then there is no question.

They have: 101 posts

Joined: Apr 2003

oo ic

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.