mfischer                Sun May 19 03:52:59 2002 EDT

  Modified files:              
    /phpdoc/en/reference/posix  reference.xml 
  Log:
  - Posix extension should not really be used in environment where security
    matters. Also add note it's not availabvle on win32.
  # This renders all open posix reports about safe_mode obsolete.
  
  
Index: phpdoc/en/reference/posix/reference.xml
diff -u phpdoc/en/reference/posix/reference.xml:1.2 
phpdoc/en/reference/posix/reference.xml:1.3
--- phpdoc/en/reference/posix/reference.xml:1.2 Mon Apr 15 17:57:17 2002
+++ phpdoc/en/reference/posix/reference.xml     Sun May 19 03:52:59 2002
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.2 $ -->
+<!-- $Revision: 1.3 $ -->
  <reference id="ref.posix">
   <title>POSIX functions</title>
   <titleabbrev>POSIX</titleabbrev>
@@ -15,6 +15,25 @@
     and this module tries to remedy this by providing easy access to
     these functions.
    </para>
+   <warning>
+    <para>
+     Sensitive data can be retrieved with the <link
+     linkend="ref.posix">POSIX</link> functions, e.g.
+     <function>posix_getpwnam</function> and friends. None of the <link
+     linkend="ref.posix">POSIX</link> function perform any kind of access
+     checking when <link linkend="ini.safe-mode">safe mode</link> is enabled.
+     It's therefore <emphasis role="strong">strongly</emphasis> advised to
+     disable the <link linkend="ref.posix">POSIX</link> extension at all (use
+     <literal>--disable-posix</literal> in your configure line) if you're
+     operating in such an environment.
+    </para>
+   </warning>
+   <note>
+    <para>
+     The <link linkend="ref.posix">POSIX</link> extension is <emphasis
+     role="strong">not</emphasis> available on the Windows platform.
+    </para>
+   </note>
   </partintro>
 
 &reference.posix.functions;


Reply via email to