On Monday, 18 October 2004 04.00, Derek Fountain wrote:
On Monday 18 October 2004 09:42, Anders Johansson wrote:
Yes it's disabled as a built-in feature, what's in that rpm is an extension. It *should* put an "extension=session.so" line in /etc/php.ini for you when it installs
Is this not also a security issue - ie allowing dynamic loading of php modules? Check out the PHP manual section 3 - configuration // quote Extension Loading Directives enable_dl boolean This directive is really only useful in the Apache module version of PHP. You can turn dynamic loading of PHP extensions with dl() on and off per virtual server or per directory. The main reason for turning dynamic loading off is security. With dynamic loading, it's possible to ignore all the safe_mode and open_basedir restrictions. The default is to allow dynamic loading, except when using safe-mode. In safe-mode, it's always imposible to use dl(). extension_dir string In what directory PHP should look for dynamically loadable extensions. extension string Which dynamically loadable extensions to load when PHP starts up. // unquote Regards - Keith Roberts http://www.karsites.net