Why shouldn't you use PHP safe mode? - Revision history

Hutchy68: added another category

2012-10-19T11:53:04Z

added another category

Hutchy68: added category

2012-10-19T11:52:13Z

added category

JoomlaWikiBot: clean up categories with tags

2012-09-01T21:28:25Z

clean up categories with <noinclude> tags

Prazgod: spelling mistake

2011-11-11T01:14:29Z

spelling mistake

Prazgod: safe mode is depreciated in version 5.3.0 and not 6 as previously stated

2011-11-11T01:10:31Z

safe mode is depreciated in version 5.3.0 and not 6 as previously stated

Realityking at 14:00, 23 August 2011

2011-08-23T14:00:40Z

Jabama: New page: '''Overview''' Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It ma...

2008-10-11T22:45:53Z

New page: '''Overview''' Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It ma...

New page

'''Overview'''

Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It may make sense in some situations, but there is almost always a better way. Because safe_mode in some sense only gives the illusion of safety, it will be removed from PHP starting with version 6.0.

The Joomla! core works fine with or without PHP safe_mode. The one execption to this rule is the installation script. This is because safe_mode, by design, turns off the PHP functions that enable easy uploading via a Web browser. If you do use safe_mode, and need to perform installs via the Web browser, temporarily turn safe_mode OFF, and turn it back ON when finished.

Some third-party extensions may require the specific PHP functions that are blocked by safe_mode. Such extensions should be carefully evaluated to be sure you understand exactly why they require such powerful and potentially dangerous functions.

'''From the official PHP site'''

''"The PHP safe mode is an attempt to solve the shared-server security problem. It is architecturally incorrect to try to solve this problem at the PHP level, but since the alternatives at the web server and OS levels aren't very realistic, many people, especially ISP's, use safe mode for now."''
'''
More Information'''

# [http://us3.php.net/manual/en/features.safe-mode.php#ini.safe-mode Official PHP Manual: PHP Security and Safe Mode Configuration Directives]
# [http://us3.php.net/manual/en/features.safe-mode.functions.php Official PHP Manual: PHP Functions restricted/disabled by safe mode]

[[Category:FAQ]]
[[Category:Administration FAQ]]
[[Category:Installation FAQ]]
[[Category:Upgrading and Migrating FAQ]]
[[Category:Version 1.5 FAQ]]

@@ Line 24: / Line 24: @@
 [[Category:Version 1.6 FAQ]]
 [[Category:Version 1.7 FAQ]]
-[[Category:Server configurations]]</noinclude>
+[[Category:Server configurations]]

@@ Line 23: / Line 23: @@
 [[Category:Version 1.5 FAQ]]
 [[Category:Version 1.6 FAQ]]
-[[Category:Version 1.7 FAQ]]</noinclude>
+[[Category:Version 1.7 FAQ]]

@@ Line 17: / Line 17: @@
-[[Category:FAQ]]
+<noinclude>[[Category:FAQ]]
 [[Category:Administration FAQ]]
 [[Category:Installation FAQ]]
@@ Line 23: / Line 23: @@
 [[Category:Version 1.5 FAQ]]
 [[Category:Version 1.6 FAQ]]
-[[Category:Version 1.7 FAQ]]
+[[Category:Version 1.7 FAQ]]</noinclude>

@@ Line 3: / Line 3: @@
 Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It may make sense in some situations, but there is almost always a better way. Because safe_mode in some sense only gives the illusion of safety, it will be removed from PHP starting with version 5.3.0.
-The Joomla! core works fine with or without PHP safe_mode. The one execption to this rule is the installation script. This is because safe_mode, by design, turns off the PHP functions that enable easy uploading via a Web browser. If you do use safe_mode, and need to perform installs via the Web browser, temporarily turn safe_mode OFF, and turn it back ON when finished.
+The Joomla! core works fine with or without PHP safe_mode. The one exception to this rule is the installation script. This is because safe_mode, by design, turns off the PHP functions that enable easy uploading via a Web browser. If you do use safe_mode, and need to perform installs via the Web browser, temporarily turn safe_mode OFF, and turn it back ON when finished.
 Some third-party extensions may require the specific PHP functions that are blocked by safe_mode. Such extensions should be carefully evaluated to be sure you understand exactly why they require such powerful and potentially dangerous functions.

← Older revision		Revision as of 14:00, 23 August 2011
Line 22:		Line 22:
	[[Category:Upgrading and Migrating FAQ]]		[[Category:Upgrading and Migrating FAQ]]
	[[Category:Version 1.5 FAQ]]		[[Category:Version 1.5 FAQ]]
		+	[[Category:Version 1.6 FAQ]]
		+	[[Category:Version 1.7 FAQ]]

@@ Line 1: / Line 1: @@
 '''Overview'''
-Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It may make sense in some situations, but there is almost always a better way. Because safe_mode in some sense only gives the illusion of safety, it will be removed from PHP starting with version 6.0.
+Enabling safe_mode is not needed if other reasonable security precautions are followed. Using safe_mode for web site security is a poor compromise in a bad situation. It may make sense in some situations, but there is almost always a better way. Because safe_mode in some sense only gives the illusion of safety, it will be removed from PHP starting with version 5.3.0.
 The Joomla! core works fine with or without PHP safe_mode. The one execption to this rule is the installation script. This is because safe_mode, by design, turns off the PHP functions that enable easy uploading via a Web browser. If you do use safe_mode, and need to perform installs via the Web browser, temporarily turn safe_mode OFF, and turn it back ON when finished.