On Thursday 15 July 2004 23:30, Frank Holtschke wrote:
Even if you could prevent an included file from being parsed, I can't see how it would help you as you can't assign the contents to a variable. But you say that you "sometimes have problems" which implies that sometimes it works. Could you explain how it works?
We just flush it on the display. the php-script is an image src like <img src="showImage.php">
That's interesting.
The showImage.php does an include of the image which is located out of the DocumentRoot. The image is generated by a cron script. Mostly it works but sometimes we have the problem described above.
And anyway why are your images in safe_mode_include_dir in the first place?
Cause php-scripts (owned by different uids => therefore the safe_mode_include_dir ) of various virtual servers make use of the image.
Several suggestions:
1) If the various virtual servers have no need to perform file operations anywhere else then you may get away with setting open_basedir appropriately.
2) Use the safe_mode_gid switch.
3) If cronjob is owned by root then have it create images for each of the virtual servers and set permissions accordingly.
thanks for your suggestions. We think about a very simple solution. Just changing the parser-identifier
from '<?' to '<?php' by setting the short_open_tag=Off in the php.ini . The probability of the substring
'<?php' in the image-stream seems to be very low.
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
