php_admin_* directives in a phpSuExec environment


 
Thread Tools Search this Thread
Special Forums Cybersecurity php_admin_* directives in a phpSuExec environment
# 1  
Old 01-03-2006
php_admin_* directives in a phpSuExec environment

Hello,

Is there anyway to prevent users from modifying limits imposed by php.ini configuration in a phpSuExec configured PHP installation??

For example in server with PHP running in a module, I use php_admin_* directives:

php_admin_value memory_limit 40M

And users can't modify them from .htacess (php_value memory_limit 40M) or in a script: ini_set("memory_limit","40M").

This doesnt work in a phpSuExec enviroment.. I can modify those limits with a php.ini file or with a script :-(

Is there anyway to prevent this?? Thanks

Regards,

--
Santi Saez
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

WHy do we need both append and output directives?

Hi, I was reviewing a shell script and I found this line: yum -y update >> >(/usr/bin/tee /var/log/file) I have tried removing the >> directive and all that will occur is that the file will be created--nothing gets put in the file. If I put back the >> directive it works. If I remove the... (3 Replies)
Discussion started by: mojoman
3 Replies

2. Programming

Use #if not defined with OR boolean logic in preprocessor directives

I am currently using Linux CentOS and programming in FORTRAN 90 using Portland 7.1 compiler. I am able to set in the preprocessor directives a flag called TEST. when I go to use logic in my code i can write #ifdef TEST execute something #endif Furthermore, if I want to negate the... (2 Replies)
Discussion started by: prodigious8
2 Replies

3. Shell Programming and Scripting

GNU & BSD Makefile Directives & Conditions Compatibility

Firstly, I would like to apologize if this is not the appropriate sub-forum to post about GNU/BSD makefile scripting. Though my code is in C++, because I am focusing on the makefile I thought it would go better in shell scripting. Please correct me if I am wrong. Secondly, I am not interested in... (0 Replies)
Discussion started by: AntumDeluge
0 Replies

4. Solaris

Environment Variable

Hi All, I am new to SUN Solaris.I have some questions regarding environment variable.:confused: Q1. Where the environment variables available in Solaris. Q2. What command used here. Q3. Can a user change this .Suppose i want to change the bash to ksh can it be possible here. Or i need to... (2 Replies)
Discussion started by: jdash.ps
2 Replies

5. Shell Programming and Scripting

Environment seetting

Hi Frinds, I am getting following error while executing the script. Can anybody suggest how to overcome this ? Is environment seetting wrong ? $ ksh hyp_incoming.csh hyp_incoming.csh: !/bin/csh: not found hyp_incoming.csh: /usr/local/hyperion/log/run_log.txt: cannot create... (2 Replies)
Discussion started by: deep_kol
2 Replies

6. Solaris

Environment help please

Hello all, I am a bit confused not only because I am new to Solaris but because when I run "env" I get a list of variables that are not in the user .profile. Where else can the account be getting environment variables from? Is there a .profile that applies to all accounts? Thank you in... (4 Replies)
Discussion started by: komputersman
4 Replies

7. UNIX for Advanced & Expert Users

Reset environment - ".. /etc/.environment dev_env"

I have been resently working on some ksh script. One of the line in the file writes: .. /etc/.environment dev_env I can not understand what this mean, all I know is .environment is unix system environment file. Is ".." a command? If some one can give me some clue where can I find information... (7 Replies)
Discussion started by: zzwu3591
7 Replies

8. UNIX for Dummies Questions & Answers

Cron Environment

I am trying to run a series of perl scripts at different times using crontab under solaris. The scripts that i am using require some specific environment variables to be specified for database functionality, but i would also like it that i can specify a few global variables for output locations. ... (8 Replies)
Discussion started by: Smitty McSmith
8 Replies

9. Shell Programming and Scripting

Environment Variable

First of all I am using C shell. I have a variable destDirectory that holds a path. the path includes an environment variable($user) when I try to execute a command within the script, the $destDirectory gets replaced with the path, but the environment variable is not replaced. I end up... (2 Replies)
Discussion started by: karyn1617
2 Replies

10. Cybersecurity

ipfw directives and order of precidence...

Is there a general rule I can apply when examining/editing ipfw entries? Also, does each new entry have to have a unique rule number? And, I think I can write a script to block code red infected machines (though I'm not sure it would do more than slim down my web server error message log),... (0 Replies)
Discussion started by: [MA]Flying_Meat
0 Replies
Login or Register to Ask a Question
PHPINFO(3)								 1								PHPINFO(3)

phpinfo - Outputs information about PHP's configuration

SYNOPSIS
bool phpinfo ([int $what = INFO_ALL]) DESCRIPTION
Outputs a large amount of information about the current state of PHP. This includes information about PHP compilation options and exten- sions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License. Because every system is setup differently, phpinfo(3) is commonly used to check configuration settings and for available predefined vari- ables on a given system. phpinfo(3) is also a valuable debugging tool as it contains all EGPCS (Environment, GET, POST, Cookie, Server) data. PARAMETERS
o $what - The output may be customized by passing one or more of the following constants bitwise values summed together in the optional $what parameter. One can also combine the respective constants or bitwise values together with the or operator. phpinfo(3) options +-------------------+--------------------------------------+---+ | Name (constant) | | | | | | | | | Value | | | | | | | | Description | | | | | | +-------------------+--------------------------------------+---+ | INFO_GENERAL | | | | | | | | | 1 | | | | | | | | The configuration line, php.ini | | | | location, build date, Web Server, | | | | System and more. | | | | | | | INFO_CREDITS | | | | | | | | | 2 | | | | | | | | PHP Credits. See also phpcred- | | | | its(3). | | | | | | |INFO_CONFIGURATION | | | | | | | | | 4 | | | | | | | | Current Local and Master values for | | | | PHP directives. See also ini_get(3). | | | | | | | INFO_MODULES | | | | | | | | | 8 | | | | | | | | Loaded modules and their respective | | | | settings. See also get_loaded_exten- | | | | sions(3). | | | | | | | INFO_ENVIRONMENT | | | | | | | | | 16 | | | | | | | | Environment Variable information | | | | that's also available in $_ENV. | | | | | | | INFO_VARIABLES | | | | | | | | | 32 | | | | | | | | Shows all predefined variables | | | | from EGPCS (Environment, GET, POST, | | | | Cookie, Server). | | | | | | | INFO_LICENSE | | | | | | | | | 64 | | | | | | | | PHP License information. See also | | | | the license FAQ. | | | | | | | INFO_ALL | | | | | | | | | -1 | | | | | | | | Shows all of the above. | | | | | | +-------------------+--------------------------------------+---+ RETURN VALUES
Returns TRUE on success or FALSE on failure. CHANGELOG
+--------+---------------------------------------------------+ |Version | | | | | | | Description | | | | +--------+---------------------------------------------------+ | 5.5.0 | | | | | | | Logo GUIDs were replaced with data URIs, and so | | | turning off expose_php now has no effect on the | | | result of phpinfo(). Credits are also now embed- | | | ded within the output itself instead of linked. | | | | | 5.2.2 | | | | | | | The "Loaded Configuration File" information was | | | added, when before only "Configuration File | | | (php.ini) Path" existed. | | | | +--------+---------------------------------------------------+ EXAMPLES
Example #1 phpinfo(3) Example <?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ?> NOTES
Note In versions of PHP before 5.5, parts of the information displayed are disabled when the expose_php configuration setting is set to off. This includes the PHP and Zend logos, and the credits. Note phpinfo(3) outputs plain text instead of HTML when using the CLI mode. SEE ALSO
phpversion(3), phpcredits(3), php_logo_guid(3), ini_get(3), ini_set(3), get_loaded_extensions(3), Predefined Variables. PHP Documentation Group PHPINFO(3)