php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #19217 safe_mode defaulting to "on", docs say "off"
Submitted: 2002-09-03 15:33 UTC Modified: 2002-09-04 08:38 UTC
From: roland at astrofoto dot org Assigned:
Status: Not a bug Package: Documentation problem
PHP Version: 4.2.2 OS: RedHat 7.2/Linux 2.4.9
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: roland at astrofoto dot org
New email:
PHP Version: OS:

 

 [2002-09-03 15:33 UTC] roland at astrofoto dot org 
safe_mode is documented to default to "off".  However, after an upgrade from PHP 4.1.2 to 4.2.2, a call to 

    fopen ("/tmp/mkimg.log", "a");

began to fail.  In order to correct the problem, I had to add a line

    php_admin_value safe_mode off

to my Apache configuration.  Note that this is Apache 1.3.22.  The webserver is an Apache virtual host distinguished by IP address.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-09-03 15:36 UTC] rasmus@php.net 
Check your php.ini file or the compile flags on your particular compiled version.  The default is definitely still off in the code.
 [2002-09-03 20:23 UTC] roland at astrofoto dot org 
I don't have a php.ini and PHP was compiled with the following configure:

 ./configure  --prefix=/usr --with-config-file-path=/etc --disable-debug --enable-inline-optimization --with-apxs=/usr/sbin/apxs --with-exec-dir=/usr/bin --with-regex=system --with-gettext --with-gd --with-jpeg-dir=/usr --with-png --with-zlib --with-db2 --with-db3 --with-gdbm --enable-debugger --enable-magic-quotes --enable-safe-mode --enable-sysvsem --enable-sysvshm --enable-track-vars --enable-yp --enable-ftp --without-mysql --with-xml --with-pgsql --enable-bcmath --enable-exif --enable-ctype

The only place anything appears that would set safe_mode is my newly added php_admin_value setting.

Is there some other place I need to look?
 [2002-09-04 05:09 UTC] sniper@php.net 
Your configure line. You're enabling it there.

--enable-safe-mode

Remove that, and it will be off.
 [2002-09-04 08:38 UTC] roland at astrofoto dot org 
Doh!  I'm an idiot.  I'll plead sleep deprivation.

I did copy the config from 4.1.2 and didn't look close enough since 4.1.2 didn't enforce safe_mode for fopen().

Sorry to waste everyone's time....
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Oct 29 13:00:01 2025 UTC