Re: AW: securing php

[Florian Weimer <fw () deneb enyo de>]

vogt () hansenet com writes:

> You an enable PHP's "Safe Mode", which goes a long way to
> closing these holes, but it's not a 100% solution.

PHP uses many libraries which were not designed to cope with malicious
input from the application.  That's why PHP Safe Mode is unsafe *by*
*design*.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html