summaryrefslogtreecommitdiff
path: root/php.ini-dist
diff options
context:
space:
mode:
authorZeev Suraski <zeev@php.net>2000-01-30 22:10:30 +0000
committerZeev Suraski <zeev@php.net>2000-01-30 22:10:30 +0000
commit55400283405987fa2fe7c4342052a924e8138fd9 (patch)
tree018ab811be5da47c6deb90a158dfa5870df116c7 /php.ini-dist
parentfdbca7526fd74ac6fb1010b0b45d58219698795e (diff)
downloadphp-git-55400283405987fa2fe7c4342052a924e8138fd9.tar.gz
@- Added the ability to prevent the user from overriding certain environment
@ variables in Safe Mode (Zeev) - Finished work, more or less
Diffstat (limited to 'php.ini-dist')
-rw-r--r--php.ini-dist6
1 files changed, 6 insertions, 0 deletions
diff --git a/php.ini-dist b/php.ini-dist
index 583f5df0bd..844bf100e8 100644
--- a/php.ini-dist
+++ b/php.ini-dist
@@ -77,6 +77,12 @@ allow_call_time_pass_reference = On ; whether to enable the ability to force arg
; Safe Mode
safe_mode = Off
safe_mode_exec_dir =
+safe_mode_protected_env_vars = LD_LIBRARY_PATH ; In Safe Mode, setting certain environment
+ ; variables may be a potential security
+ ; breach. This directive contains
+ ; a comma delimited list of environment
+ ; variables, that the end user won't be
+ ; able to override using putenv()
; Colors for Syntax Highlighting mode. Anything that's acceptable in <font color=???> would work.
highlight.string = #DD0000