; open_basedir, if set, limits all file operations to the defined directory
; and below, including the file itself. This directive is not affected
; by whether Safe Mode is turned On or Off.
; By default this it is set to "." which means that this allows access to files
; that are in current working directory.
; By default this is also set to "sys:/tmp". This is actually the value that is
; set for the below mentioned "upload_tmp_dir" directive. If "upload_tmp_dir" is
; changed, change the same for "open_basedir" also. This is done to allow
; phpMyAdmin application users to execute SQL commands through an SQL file.
empfohlen: open_basedir = "/srv/www/htdocs"
- verhindert zugriff auf gesamte festplatte
---------------------------------------------------------------------------------
; Temporary directory for HTTP uploaded files (will use system default if not
; specified).
empfohlen: upload_tmp_dir = "/srv/www/tmp"
- sonst bringt open_basedir auch nix, da tmp wieder in nem anderen pfad liegt
---------------------------------------------------------------------------------
; Safe Mode
empfohlen: safe_mode = On
- passt also
---------------------------------------------------------------------------------
; Magic quotes for incoming GET/POST/Cookie data.
empfohlen: magic_quotes_gpc = On
- Anführungszeichen und Hochkommas aus
---------------------------------------------------------------------------------
; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
empfohlen: allow_url_fopen = No
- Lädt keine Webseiten auf entfernten Servern (Manipulierte URLs)
---------------------------------------------------------------------------------
; This directive allows you to disable certain functions for security reasons.
; It receives a comma-delimited list of function names. This directive is
; *NOT* affected by whether Safe Mode is turned On or Off.
empfohlen: disable_functions = system, exec, shell_exec, passthru, phpinfo, show_source
- keine Linuxkommandos mehr zulassen da diese mit rechten des Webservers laufen
---------------------------------------------------------------------------------
; When safe_mode is on, only executables located in the safe_mode_exec_dir
; will be allowed to be executed via the exec family of functions.
empfohlen: safe_mode_exec_dir = "/srv/www/bin"
- wird nur dann gemacht, wenn exec (siehe oben) gebraucht wird
---------------------------------------------------------------------------------
; Whether or not to register the EGPCS variables as global variables. You may
; want to turn this off if you don't want to clutter your scripts' global scope
; with user data. This makes most sense when coupled with track_vars - in which
; case you can access all of the GPC variables through the $HTTP_*_VARS[],
; variables.
;
; You should do your best to write your scripts so that they do not require
; register_globals to be on; Using form variables as globals can easily lead
; to possible security problems, if the code is not very well thought of.
empfohlen: register_globals = Off
- bekannt...
Ja gut, habe das
