php_admin_* directives in a phpSuExec environment


 
Thread Tools Search this Thread
Special Forums Cybersecurity php_admin_* directives in a phpSuExec environment
# 1  
Old 01-03-2006
php_admin_* directives in a phpSuExec environment

Hello,

Is there anyway to prevent users from modifying limits imposed by php.ini configuration in a phpSuExec configured PHP installation??

For example in server with PHP running in a module, I use php_admin_* directives:

php_admin_value memory_limit 40M

And users can't modify them from .htacess (php_value memory_limit 40M) or in a script: ini_set("memory_limit","40M").

This doesnt work in a phpSuExec enviroment.. I can modify those limits with a php.ini file or with a script :-(

Is there anyway to prevent this?? Thanks

Regards,

--
Santi Saez
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

WHy do we need both append and output directives?

Hi, I was reviewing a shell script and I found this line: yum -y update >> >(/usr/bin/tee /var/log/file) I have tried removing the >> directive and all that will occur is that the file will be created--nothing gets put in the file. If I put back the >> directive it works. If I remove the... (3 Replies)
Discussion started by: mojoman
3 Replies

2. Programming

Use #if not defined with OR boolean logic in preprocessor directives

I am currently using Linux CentOS and programming in FORTRAN 90 using Portland 7.1 compiler. I am able to set in the preprocessor directives a flag called TEST. when I go to use logic in my code i can write #ifdef TEST execute something #endif Furthermore, if I want to negate the... (2 Replies)
Discussion started by: prodigious8
2 Replies

3. Shell Programming and Scripting

GNU & BSD Makefile Directives & Conditions Compatibility

Firstly, I would like to apologize if this is not the appropriate sub-forum to post about GNU/BSD makefile scripting. Though my code is in C++, because I am focusing on the makefile I thought it would go better in shell scripting. Please correct me if I am wrong. Secondly, I am not interested in... (0 Replies)
Discussion started by: AntumDeluge
0 Replies

4. Solaris

Environment Variable

Hi All, I am new to SUN Solaris.I have some questions regarding environment variable.:confused: Q1. Where the environment variables available in Solaris. Q2. What command used here. Q3. Can a user change this .Suppose i want to change the bash to ksh can it be possible here. Or i need to... (2 Replies)
Discussion started by: jdash.ps
2 Replies

5. Shell Programming and Scripting

Environment seetting

Hi Frinds, I am getting following error while executing the script. Can anybody suggest how to overcome this ? Is environment seetting wrong ? $ ksh hyp_incoming.csh hyp_incoming.csh: !/bin/csh: not found hyp_incoming.csh: /usr/local/hyperion/log/run_log.txt: cannot create... (2 Replies)
Discussion started by: deep_kol
2 Replies

6. Solaris

Environment help please

Hello all, I am a bit confused not only because I am new to Solaris but because when I run "env" I get a list of variables that are not in the user .profile. Where else can the account be getting environment variables from? Is there a .profile that applies to all accounts? Thank you in... (4 Replies)
Discussion started by: komputersman
4 Replies

7. UNIX for Advanced & Expert Users

Reset environment - ".. /etc/.environment dev_env"

I have been resently working on some ksh script. One of the line in the file writes: .. /etc/.environment dev_env I can not understand what this mean, all I know is .environment is unix system environment file. Is ".." a command? If some one can give me some clue where can I find information... (7 Replies)
Discussion started by: zzwu3591
7 Replies

8. UNIX for Dummies Questions & Answers

Cron Environment

I am trying to run a series of perl scripts at different times using crontab under solaris. The scripts that i am using require some specific environment variables to be specified for database functionality, but i would also like it that i can specify a few global variables for output locations. ... (8 Replies)
Discussion started by: Smitty McSmith
8 Replies

9. Shell Programming and Scripting

Environment Variable

First of all I am using C shell. I have a variable destDirectory that holds a path. the path includes an environment variable($user) when I try to execute a command within the script, the $destDirectory gets replaced with the path, but the environment variable is not replaced. I end up... (2 Replies)
Discussion started by: karyn1617
2 Replies

10. Cybersecurity

ipfw directives and order of precidence...

Is there a general rule I can apply when examining/editing ipfw entries? Also, does each new entry have to have a unique rule number? And, I think I can write a script to block code red infected machines (though I'm not sure it would do more than slim down my web server error message log),... (0 Replies)
Discussion started by: [MA]Flying_Meat
0 Replies
Login or Register to Ask a Question
_ENV(3) 								 1								   _ENV(3)

$_ENV - Environment variables

	An associative array of variables passed to the current script via the environment method.

	These  variables are imported into PHP's global namespace from the environment under which the PHP parser is running. Many are provided by
       the shell under which PHP is running and different systems are likely running different kinds of shells, a definitive list  is  impossible.
       Please see your shell's documentation for a list of defined environment variables.

	Other environment variables include the CGI variables, placed there regardless of whether PHP is running as a server module or CGI proces-
       sor.

       $HTTP_ENV_VARS contains the same initial information, but is not a superglobal. (Note that $HTTP_ENV_VARS and $_ENV are different variables
       and that PHP handles them as such)

       +--------+---------------------------------------------------+
       |Version |						    |
       |	|						    |
       |	|		     Description		    |
       |	|						    |
       +--------+---------------------------------------------------+
       | 4.1.0	|						    |
       |	|						    |
       |	|  Introduced $_ENV that deprecated $HTTP_ENV_VARS. |
       |	|						    |
       +--------+---------------------------------------------------+
       Example #1

	      $_ENV example

	      <?php
	      echo 'My username is ' .$_ENV["USER"] . '!';
	      ?>

	       Assuming "bjori" executes this script

	      The above example will output something similar to:

	      My username is bjori!

       Note

	      This  is	a  'superglobal', or automatic global, variable. This simply means that it is available in all scopes throughout a script.
	      There is no need to do global $variable; to access it within functions or methods.

       getenv(3), The filter extension.

PHP Documentation Group 														   _ENV(3)