> You are right. I verified Apache changes the cwd to / unless it's
been
> launched in single process mode.
>
> And I found results could be different by cases, using DSO or
using CGI
> executable. When you run your script with CGI executable and
php.ini is
> also present in that directory, the PHP binary tries to read that
one as
> mod_cgi tries to chdir to where the script is put.
> I'm not sure, but this appears to imply some security issues?

At the time CLI was introduced I argued to remove . from php.ini
search path, but that was not accepted because some people
apparently use this feature for having different configurations for
different virtual hosts.

Therefore . was removed only from CLI's php.ini search path.

Edin


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to