摘要
PHP中的safe_mode能够实现对命令、函数及文件访问权限等功能限制,因此在PHP的安全配置中起着重要作用,但safe_mode并非万能的,而且其提供的安全保护也存在很多安全漏洞,主要表现在其自身代码编写不够完善、Win32自身问题影响到部分PHP函数可任意调用受限命令和函数以及一些第三方组件的应用带来的安全隐患等。
As a very important option in PHP＇s security configure,safe mode can control the function of some command,function and file access,etc.Safe mode option can make system safe but not the safety of the system but can not offer the absolute safe protection what with mainly embodiment in PHP code own compilation insufficient consummation,some bugs of the Win32 system affect that the partial PHP functions may arbitrarily call some limited commad or function and some potential danger attribute to some third-party modules and so on.
出处
《网络安全技术与应用》
2011年第4期9-11,共3页
Network Security Technology & Application
