Re: Allowing [SAPI=] entries in ini files.

From: Date: Wed, 20 Nov 2013 09:58:14 +0000
Subject: Re: Allowing [SAPI=] entries in ini files.
References: 1 2  Groups: php.internals 
Request: Send a blank email to internals+get-70219@lists.php.net to get a copy of this message
On 19 November 2013 19:51, Sebastian Krebs <krebs.seb@gmail.com> wrote:

> Just my 2 cents, but that sounds more like an issue with your
> provider/hoster and not with PHP. I always thought of the additional
> php.ini as a way to change some details and not a way to set up the whole
> runtime. Especially when a user has write access to that file it seems to
> me also an security issue, when PHP allows to set/change critical settings
> there.

You totally miss the point, Sebastian. As Richard already explained in
his example, he as access to the ini-scan-dir, so he could set
whatever setting he wants, just not SAPI-specific, but for all SAPIs.


-- 
Regards,
Mike


Thread (16 messages)

« previous php.internals (#70219) next »