summaryrefslogtreecommitdiff
path: root/main/php_globals.h
Commit message (Collapse)AuthorAgeFilesLines
...
* Redesigned thread safety mechanism - nua nuaZeev Suraski2001-07-281-11/+1
|
* Add always_populate_raw_post_data ini directive and default it to 0 toRasmus Lerdorf2001-07-171-0/+2
| | | | | | | | | maintain current behaviour. If this is turned on then $HTTP_RAW_POST_DATA is always populated with a copy of the raw post data. @ - Add config option (always_populate_raw_post_data) which when enabled @ will always populate $HTTP_RAW_POST_DATA regardless of the post mime @ type (Rasmus)
* o Fixed Bug #12121: chdir and safe_modeJames E. Flemer2001-07-131-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - [ main/safe_mode.h ] added new checkuid mode: CHECKUID_ALLOW_ONLY_FILE: skips directory check if file check fails - [ ext/standard/dir.c ] changed php_checkuid() to use CHECKUID_ALLOW_ONLY_FILE instead of CHECKUID_ALLOW_ONLY_DIR - [ main/safe_mode.c ] added code for new checkuid mode o Fixed Bug #12119: safe mode owner check can be bypassed with symlink - [ main/safe_mode.c ] use VCWD_REALPATH to resolve destination of symlink before trimming filename o New Feature: safe_mode_include_dir (php.ini directive) - Allows bypassing UID/GID checks when including files from the directory in safe_mode_include_dir and its subdirectories. (safe_mode must be on, directory must also be in include_path or full path must be used when including) o Fixed Feature: safe_mode_gid (php.ini directive) - Correctly check (and report) UID/GID bits on directories o Changed include() fall back to scripts cwd implementation - CWD added to the (local) search path in php_fopen_with_path() instead of seperate case. [ main/fopen_wrappers.c ]
* Fix xmlrpc_error:number handlingSascha Schumann2001-07-131-1/+1
|
* Allow errors to be returned as XMLRPC fault packets.Sascha Schumann2001-07-101-0/+4
| | | | | Submitted by: Matt Allen <matt@investigationmarketplace.com>
* Add getmygid() and safe_mode_gid ini directive to allow safe mode to doRasmus Lerdorf2001-07-091-0/+1
| | | | | | | a gid check instead of a uid check. @ - Add getmygid() and safe_mode_gid ini directive to allow safe mode to do @ a gid check instead of a uid check. (James E. Flemer, Rasmus)
* Added new configuration directives:foobar2001-04-041-1/+7
| | | | | arg_separator.input and arg_separator.output
* - Fix copyright notices with 2001Andi Gutmans2001-02-261-1/+1
|
* - Remove the ini_extension_list globalZeev Suraski2001-01-151-2/+0
| | | | | - Switch to delayed loading of Zend extensions
* Defer loading of extensions until all configuration entries have beenSascha Schumann2001-01-151-0/+2
| | | | | added to the configuration hash.
* - Import Jade Nicoletti's transparent gzip encoding support as an outputZeev Suraski2000-11-131-0/+3
| | | | | | | handler. Works quite nicely! - Fix buglets in output buffering - Add output_handler INI directive
* fopen wrappers cleanupHartmut Holzgraefe2000-10-131-0/+2
| | | | | | | | | - comfiguration is now done by an ini parameter instead of a compile time option - the implementations of the three standard wrappers now live in seperate files in ext/standard - the compiler is happy again, no more warnings
* More security-related (control) patches:Zeev Suraski2000-09-091-1/+6
| | | | | | | - Avoid displaying errors during startup, unless display_startup_errors is enabled. - Implemented post_size_max limit. Defaults to 8MB. - Implemented file_uploads on/off directive (defaults to on).
* Fix orderingZeev Suraski2000-09-061-6/+6
|
* - Remove track_vars - it is now always onZeev Suraski2000-09-051-10/+8
| | | | | | | - Make the various $HTTP_*_VARS[] arrays be defined always, even if they're empty - Fix Win32 build and warnings
* Fix the file upload security problem with no side effects (untested)Zeev Suraski2000-09-041-1/+3
|
* Added "html_errors" directive to optionally disable HTML formatting of errorStig Bakken2000-07-041-0/+2
| | | | | messages. The default is on. (Stig)
* Change header protection macros to conform to standard.Sascha Schumann2000-07-021-3/+3
| | | | | | | | | Draft 3 of IEEE 1003.1 200x, "2.2 The Compilation Environment" All identifiers that begin with an underscore and either an uppercase letter or another underscore are always reserved for any use by the implementation.
* Improve timeout support - ini_get("max_execution_time", ...) works nowZeev Suraski2000-06-161-2/+0
|
* @- Made the short_tags, asp_tags and allow_call_time_pass_reference INI ↵Zeev Suraski2000-06-061-3/+0
| | | | | | | directives work @ on a per-directory basis as well, e.g. from .htaccess files (Zeev)
* Fix startup sequence. It should do it this time.Zeev Suraski2000-05-291-9/+11
|
* Update the license with the new clause 6Zeev Suraski2000-05-181-2/+2
|
* Make error_prepend_string and error_append_string workRasmus Lerdorf2000-04-141-0/+3
| | | | | @Make error_prepend_string and error_append_string work
* @- Fixed a (fairly common) situation where error_reporting values would not beZeev Suraski2000-02-261-0/+1
| | | | | @ properly restored after a call to error_reporting(), in between requests (Zeev)
* - Protect $HTTP_POST_FILES[] as wellZeev Suraski2000-02-261-0/+1
|
* @- The various $HTTP_*_VARS[] are now protected, and cannot be manipulated byZeev Suraski2000-02-261-0/+10
| | | | | | @ user input (Zeev) This patch is untested! I'll only have time to test it thoroughly in a couple of hours...
* @- Implemented default_charset and default_mimetype config directives (Stig)Stig Bakken2000-02-251-3/+3
| | | | | | Implemented default_charset and default_mimetype configuration directives. Started implementing ticks in PHP.
* started implementing directives for default mimetype/charsetStig Bakken2000-02-241-0/+3
|
* Get the license right... (this won't make it to RC1 of B4)Zeev Suraski2000-02-191-2/+2
|
* Trap bailout of shutdown functionsZeev Suraski2000-02-131-1/+0
|
* (request_shutdown) Prevent infinite loop on shutdown if there is an errorAndrei Zmievski2000-02-111-0/+1
| | | | | | | | | | | in shutdown function. (php_array_walk) Print a warning if the walk function doesn't exist. Split shutdown function call into a separate function that's called with zend_hash_apply() instead of as destructor to keep hash consistent. This fixes bug #3419.
* - A few fixesZeev Suraski2000-01-281-1/+2
| | | | | - Added register_argv_argc directive to allow disabling of argv/argc
* Tried to centralize global variable registration as much as possible:Zeev Suraski2000-01-281-0/+1
| | | | | | | | | | | | - Added $HTTP_ENV_VARS[] and $HTTP_SERVER_VARS[] support, which similarly to $HTTP_GET_VARS[], contain environment and server variables. Setting register_globals to Off will now also prevent registration of the environment and server variables into the global scope (Zeev) - Renamed gpc_globals to register_globals (Zeev) - Introduced variables_order that deprecates gpc_order, and allows control over the server and environment variables, in addition to GET/POST/Cookies (Zeev)
* - Remove the pre-request-shutdown hooks, they should no longer be necessary.Zeev Suraski2000-01-161-9/+0
| | | | | | The session module may not work due to an unknown (and until now, IMO, misdiagnosed) problem, if it does, please report it!
* Remove the post-startup callback support. Modules are now started only afterZeev Suraski2000-01-161-2/+0
| | | | | | the entire engine is started. People - please make sure that the session module works properly for you.
* Initialize/destroy hook lists implicitly.Sascha Schumann2000-01-151-0/+3
|
* - don't set php_errormsg on errors that will cause a zend_bailout().Thies C. Arntzen2000-01-151-1/+2
| | | | | | | | | using zend_hash_update() can make things worse in this situation. - new function php_register_pre_request_shutdown(). this way modules can register callbacks that will be called as soon as execution of the script is done but *before* any cleanup (global symbol_table etc) has taken place.
* @- Added implicit_flush INI directive (Zeev)Zeev Suraski2000-01-131-0/+1
|
* Happy Y2K patch! Happy new year (or the new millennium, depending on whetherSascha Schumann2000-01-011-1/+1
| | | | | you start counting at 0 or 1).
* - Implement ability to turn off support for call-time pass by referenceZeev Suraski1999-12-151-0/+2
|
* @ PHP 4 scripts will now obey the max_execution_time setting and actuallyRasmus Lerdorf1999-12-031-0/+2
| | | | | | | | | @ time out (Rasmus) # Note that Apache clears all signal handler including SIGPROF before # calling the content handler, so even though we set our itimer before # this in the PHP_INI stuff, Apache kicks sand in our face and we need # to set the timer again just before we start parsing
* Remove fsock-specific membersSascha Schumann1999-12-011-4/+0
|
* Back out last commit.Sascha Schumann1999-11-261-2/+0
|
* Add reentrant versions of ctime, localtime, gmtime, asctime.Sascha Schumann1999-11-261-0/+2
| | | | | | | | | | These cannot be implemented platform-independent, so we fall back to the native non-reentrant versions, but lock during each access (only if ZTS is used). To initialize/destroy the used data structures, you need to call reentrancy_startup() before sapi_startup(), and reentrancy_shutdown() after sapi_shutdown().
* Add post request startup handlers. These are called at the end of theSascha Schumann1999-11-171-0/+7
| | | | | | request startup function, and can use the initialized structures like the symbol table.
* That's important enough to be cachedZeev Suraski1999-09-121-0/+2
|
* - Seriously optimize and clean php_parse_gpc_data()Zeev Suraski1999-09-111-0/+1
| | | | | | - Added gpc_globals directive to turn global definitions of GPC variables on/off (untested)
* work around gcc bug, otherwise compiler would die withSascha Schumann1999-09-051-1/+1
| | | | | | | toplev.c:2261: Internal compiler error in function float_signal in basic_functions.c
* CleanupsRasmus Lerdorf1999-09-041-14/+14
| | | | | | | What the heck was that dangling (c) for in the PUTC macros? Were they supposed to serve some sort of purpose, because I sure don't see one for them.
* First part of the connection_status work. No user-callable functionsRasmus Lerdorf1999-09-041-0/+3
| | | | | | | | | | | yet. That is coming next. Have also only done Apache and CGI so far. Will have to crack open my ISAPI book to do that one. Also changed the SAPI output functions to return an int. We'll check the connection status inside each one, but we might need the return code at some other level and I don't see a good reason for just tossing these return codes.