简体繁体 English

应该在什么级别解决安全模式？怎么样？

[英]At what level should safemode be solved? How?

原文 2013-04-23 10:43:56 5 1 php/ safe-mode

The PHP safe mode is an attempt to solve the shared-server security problem. PHP安全模式是一种尝试解决共享服务器安全性问题的尝试。 To quote from the PHP manual : 引用PHP手册：

It is architecturally incorrect to try to solve this problem at the PHP level, but since the alternatives at the web server and OS levels aren't very realistic, many people, especially ISP's, use safe mode for now. 在PHP级别尝试解决此问题在结构上是不正确的，但是由于Web服务器和OS级别的替代方案不是很现实，因此许多人（尤其是ISP）目前使用安全模式。

If the PHP safe mode is architecturally incorrect to try to solve this problem at the PHP level then at what level should this be solved? 如果PHP安全模式在架构上不正确，则尝试在PHP级别解决此问题，那么应该在什么级别解决？ How? 怎么样？

Some people say you can secure your site without safe mode or with safe mode off but recording to some experienced hosts support guys. 有人说您可以在不使用安全模式或关闭安全模式的情况下保护您的站点，但是可以向一些有经验的主机支持人员录音。 It's not possible to have full security with safe_mode_off even if you have alternative security tools, such as ModSecurity. 即使您拥有其他安全工具（例如ModSecurity），也无法通过safe_mode_off获得完全的安全性。

So, I'm not sure which is right? 所以，我不确定哪个是对的？ I'm now totally confused and trying to find a reliable and accurate solution for this case to run my sites with safe_mode_off servers or without it but couldn't. 我现在完全感到困惑，并试图为这种情况找到可靠，准确的解决方案，以在有safe_mode_off服务器的情况下运行我的网站，或者没有，但无法运行。

1 个解决方案

The conclusion you draw from the PHP manual page is wrong. 您从PHP手册页得出的结论是错误的。 You didn't read/understood it fully: To introduce safemode was the faux-pas in the first place. 您没有完全阅读/理解它：引入安全模式首先是虚假的。 There was nothing to solve and nothing was solved with it. 没有什么可以解决的，也没有解决的办法。 It was just more some marketing, hence the name "Safe Mode", to target Shared-Hoster for PHP installments. 只是针对于PHP分期付款的Shared-Hoster，进行了一些营销活动，因此命名为“安全模式”。

If you instead want to learn about resource management of the operating system you use, consult the technical documentation of it. 相反，如果您想了解所使用操作系统的资源管理，请查阅其技术文档。