Hi, s since MySQL-Version 3.23.49 and 4.0.2 the LOAD DATA LOCAL INFILE option is disabled by default, unless the server and client supports it.
With an external libmysql (and also with the integrated libmysql, which doesn't support disable load data), we have a "little" security hole, because in safe_mode it is possible to load (and view) all the data, which is under access of the webserver). I would like to disable LOAD DATA LOCAL INFILE in safe mode. However this will generate a lot of trouble, since users without shell access aren't able to import data in their mysql-db. Any opinions/suggestions? Georg -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php
