ID: 10970 Updated by: rasmus Reported By: [EMAIL PROTECTED] Old-Status: Open Status: Closed Bug Type: Documentation problem Operating system: PHP Version: 4.0.5 Assigned To: Comments: Note added to docs cvs. A putenv() is only active for the duration of the request in which the env var was set. At the end of the request the original environment is restored. Previous Comments: --------------------------------------------------------------------------- [2001-05-19 11:26:52] [EMAIL PROTECTED] Visibility scope of the environment variables set by putenv() is not documented. It is important to know whether an environment variable set in one script can be seen from another script (served by the same Apache child, for example). http://php.net/manual/en/function.putenv.php I'm writing a secure application that passes user name and password in environment varialbles to a setuid C program, which checks the password against the shadow password file to authenticate users. It is crucial for me to know whether such approach has any security implications, derriving fromt the visibility scope of environment variables set in PHP. Many thanks, -- Arcady Genkin --------------------------------------------------------------------------- ATTENTION! Do NOT reply to this email! To reply, use the web interface found at http://bugs.php.net/?id=10970&edit=2 -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
