Javascript debugger
Website design
↑
Functions restricted/disabled by safe mode
This is a still probably incomplete and possibly incorrect listing of the functions limited by safe mode.
Table 9.2. Safe mode limited functions
| Function | Limitations |
|---|---|
| dbmopen() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| dbase_open() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| filepro() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| filepro_rowcount() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| filepro_retrieve() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| ifx_* | sql_safe_mode restrictions, (!= safe mode) |
| ingres_* | sql_safe_mode restrictions, (!= safe mode) |
| mysql_* | sql_safe_mode restrictions, (!= safe mode) |
| pg_lo_import() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| posix_mkfifo() | Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| putenv() | Obeys the safe_mode_protected_env_vars and safe_mode_allowed_env_vars ini-directives. See also the documentation on putenv() |
| move_uploaded_file() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| chdir() | Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| dl() | This function is disabled in safe mode. |
| backtick operator | This function is disabled in safe mode. |
| shell_exec() (functional equivalent of backticks) | This function is disabled in safe mode. |
| exec() | You can only execute executables within the safe_mode_exec_dir.
For practical reasons it's currently not allowed to have
.. components in the path to the executable.
escapeshellcmd() is executed on the argument of this
function. |
| system() | You can only execute executables within the safe_mode_exec_dir.
For practical reasons it's currently not allowed to have
.. components in the path to the executable.
escapeshellcmd() is executed on the argument of this
function. |
| passthru() | You can only execute executables within the safe_mode_exec_dir.
For practical reasons it's currently not allowed to have
.. components in the path to the executable.
escapeshellcmd() is executed on the argument of this
function. |
| popen() | You can only execute executables within the safe_mode_exec_dir.
For practical reasons it's currently not allowed to have
.. components in the path to the executable.
escapeshellcmd() is executed on the argument of this
function. |
| fopen() | Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| mkdir() | Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| rmdir() | Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| rename() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| unlink() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| copy() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. (on source and target) |
| chgrp() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| chown() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. |
| chmod() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. In addition, you cannot set the SUID, SGID and sticky bits |
| touch() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. |
| symlink() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. (note: only the target is checked) |
| link() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. (note: only the target is checked) |
| apache_request_headers() | In safe mode, headers beginning with 'authorization' (case-insensitive) will not be returned. |
| header() | In safe mode, the uid of the script is added to the
realm part of the
WWW-Authenticate header if you set this
header (used for HTTP Authentication). |
| PHP_AUTH variables |
In safe mode, the variables PHP_AUTH_USER,
PHP_AUTH_PW, and AUTH_TYPE
are not available in $_SERVER. Regardless, you
can still use REMOTE_USER for the USER.
(note: only affected since PHP 4.3.0)
|
| highlight_file(), show_source() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. (note: only affected since PHP 4.2.1) |
| parse_ini_file() | Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed. Checks whether the directory in which you are about to operate has the same UID (owner) as the script that is being executed. (note: only affected since PHP 4.2.1) |
| set_time_limit() | Has no effect when PHP is running in safe mode. |
| max_execution_time | Has no effect when PHP is running in safe mode. |
| mail() | In safe mode, the fifth parameter is disabled. (note: only affected since PHP 4.2.3) |
Any function that uses
php4/main/fopen_wrappers.c
| ?? |