safe_mode php6 compatibility

Monday 15 March 2010 4:26:53 am

Hello,

my ezpublish site(ez 4.0.3) is on shared hosting .The server handler says he must set safe_mode=ON in the php.ini file.(php5.2) for security issues.

When safe_mode=ON my site does not allow access to anyuser .

To run around this problem I set owner nobody for the ez folder and this worked.Althought th web server does not allow this on shared hosting for accessibility reason.They says that as soon as possible they will switch to php 6 which does not support safe_mode no more .So I must conform.

So, my questions are:

-is there any valid work around to get ezpublish 4.0.3 running with safe_mode=on?Can you please send a detailed how to?

-does ezpublish 4.2 guarantee compatibility with setting safe_mode=on?

Are you planning to have a new version with full compatibility with php6(or safe_mode=on)?When will it be released?

Thank you!!!!!!!

http://manuele.ath.cx

Monday 22 March 2010 5:35:33 am

Regarding PHP6, since the language isn't finalized, we won't work on supporting it, as things may still change.

About safe_mode, it is widely accepted that it is was a bad approach to securing a platform, and will go away with PHP6 (if i remember correctly). We don't support it, and most likely won't in the near future, sorry. You should show your hosting company the homepage for safe_mode on php.net: http://php.net/manual/en/features.safe-mode.php. It very clearly says that safe_mode is deprecated in PHP 5.3, and will be removed with PHP6.

So there is in the end no problem: when your company switches to PHP6, there will be no safe mode, and you'll be fine :-)

Bertrand Dunogier
eZ Systems Engineering, Lyon
http://twitter.com/bdunogier
http://gplus.to/BertrandDunogier