cvs: phpdoc-he /features safe-mode.xml

Index: phpdoc-he/features/safe-mode.xml
diff -u phpdoc-he/features/safe-mode.xml:1.2 phpdoc-he/features/safe-mode.xml:1.3
--- phpdoc-he/features/safe-mode.xml:1.2	Sun Aug 18 20:28:54 2002
+++ phpdoc-he/features/safe-mode.xml	Sun Aug 18 21:39:36 2002
@@ -2,23 +2,22 @@
 <!-- EN-Revision: 1.25 Maintainer: doron Status: translation -->
 
  <chapter id="features.safe-mode">
-  <title>Safe Mode</title>
+  <title>îöá áèåç</title>
 
   <para>
-   The PHP safe mode is an attempt to solve the shared-server security
-   problem. It is architecturally incorrect to try to solve this
-   problem at the PHP level, but since the alternatives at the web
-   server and OS levels aren't very realistic, many people,
-   especially ISP's, use safe mode for now. 
+   äîöá äáèåç ùì PHP äåà ðñéåï ìôúåø àú áòééú äàáèçä ùì ùøúéí-îùåúôéí.
+   æä ìà ðëåï îáçéðä àøëéè÷èåøéú ìôúåø àú äáòééä äæàú áøîú ä-PHP, àáì
+   îëéååï ùäàìèøðèéáåú áùøúéí åîòøëåú-äôòìä äï ìà îàåã øéàìéñèéåú,
+   àðùéí øáéí, áîéåçã ñô÷é-ùéøåú àéðèøðè, îùúîùéí áîöá áèåç ëøâò.
   </para>
   <para>
    <table>
-    <title>Configuration directives controlling safe mode are:</title>
+    <title>äåøàåú ÷åðôéâåøöéä ìùìéèä áîäöá-áèåç äï:</title>
     <tgroup cols="2">
      <thead>
       <row>
-       <entry>Directive</entry>
-       <entry>Default value</entry>
+       <entry>äåøàä</entry>
+       <entry>òøê áøéøú-îçãì</entry>
       </row>
      </thead>
      <tbody>
@@ -75,16 +74,16 @@
    </table>
   </para>
   <para>
-   When <link linkend="ini.safe-mode">safe_mode</link> is on, PHP checks to see 
-   if the owner of the current script matches the owner of the file to be 
-   operated on by a file function. For example: 
+   ëàùø <link linkend="ini.safe-mode">safe_mode</link> îåôòì, PHP áåã÷ú 
+   àí áòì ä÷åáõ ùì äñ÷øéôè äðåëçé äåà âí äáòìéí ùì ä÷åáõ ùôåð÷öééú ÷áöéí
+   úùúîù áå. ìãåâîà:
    <programlisting role="ls">
 <![CDATA[
 -rw-rw-r--    1 rasmus   rasmus       33 Jul  1 19:20 script.php 
 -rw-r--r--    1 root     root       1116 May 26 18:01 /etc/passwd 
 ]]>
    </programlisting>
-   Running this script.php 
+   äôòìú ä÷åáõ äáà 
    <programlisting role="php">
 <![CDATA[
 <?php
@@ -92,7 +91,7 @@
 ?>
 ]]>
    </programlisting>
-   results in this error when safe mode is enabled: 
+   âåøîú ìùâéàä äæàú ëùîöá áèåç ôåòì:
    <screen>
 <![CDATA[
 Warning: SAFE MODE Restriction in effect. The script whose uid is 500 is not 
@@ -101,19 +100,17 @@
    </screen>
   </para>
   <para>
-   However, there may be environments where a strict <literal>UID</literal>
-   check is not appropriate and a relaxed <literal>GID</literal> check is
-   sufficient.  This is supported by means of the <link
-   linkend="ini.safe-mode-gid">safe_mode_gid</link> switch. Setting it to
-   <literal>On</literal> performs the relaxed <literal>GID</literal> checking,
-   setting it to <literal>Off</literal> (the default) performs
-   <literal>UID</literal> checking.
+   ìîøåú æàú, éùðï ñáéáåú ùáäï áãé÷ú <literal>UID</literal> îçîéøä ìà îúàéîä
+   åáãé÷ú <literal>GID</literal> î÷ìä îñôé÷ä. äàôùøåú äæàú ðúîëú áàîöòåú îúâ
+   ä-<link linkend="ini.safe-mode-gid">safe_mode_gid</link>. ÷áéòúå ì-
+   <literal>On</literal> îáöòú àú áãé÷ú ä-<literal>GID</literal> äî÷ìä,
+   ÷áéòúå ì-<literal>Off</literal> (áøéøú-äîçãì) îáöòú áãé÷ú
+   <literal>UID</literal>.
   </para>
   <para>
-   If instead of <link linkend="ini.safe-mode">safe_mode</link>, you set an 
-   <link linkend="ini.open-basedir">open_basedir</link> directory then all
-   file operations will be limited to files under the specified directory
-   For example (Apache httpd.conf example): 
+   àí áî÷åí <link linkend="ini.safe-mode">safe_mode</link>, ð÷áòú ñôøééú
+   <link linkend="ini.open-basedir">open_basedir</link> àæ ëì ôòåìåú ä÷áöéí
+   éäéå îåâáìåú ì÷áöéí úçú äñôøééä ä÷áåòä, ìãåâîà (Apache httpd.conf):
    <programlisting role="ini">
 <![CDATA[
 <Directory /docroot>
@@ -121,9 +118,8 @@
 </Directory>
 ]]>
    </programlisting>
-   If you run the same script.php with this
-   <link linkend="ini.open-basedir">open_basedir</link> setting
-   then this is the result: 
+   àí àåúå ÷åáõ îåøõ òí ÷áéòú ä-
+   <link linkend="ini.open-basedir">open_basedir</link> àæ æàú äúåöàä:
    <screen>
 <![CDATA[
 Warning: open_basedir restriction in effect. File is in wrong directory in 
@@ -132,17 +128,16 @@
    </screen>
   </para>
   <para>
-   You can also disable individual functions. Note that the disable_functions 
-   directive can not be used outside of the &php.ini; file which means that
-   you cannot disable functions on a per-virtualhost or per-directory basis
-   in your httpd.conf file.
-   If we add this to our &php.ini; file: 
+   àôùø âí ìáèì ôåð÷öéåú ôåð÷öéåú éçéãåú, àê ìà ðéúï ìäùúîù áäåøàä
+   disable_functions îçåõ ì÷åáõ &php.ini;, îä ùàåîø ùàé-àôùø ìáèì ôåð÷öéåú
+   ø÷ ìàéçñåðéí åéøèåàìééí àå ñôøéåú áåããåú á÷åáõ httpd.conf.
+   àí îåñéôéí àú æä ì÷åáõ &php.ini;:
    <programlisting role="ini">
 <![CDATA[
 disable_functions readfile,system  
 ]]>
    </programlisting>
-   Then we get this output: 
+   î÷áìéí àú äôìè:
    <screen>
 <![CDATA[
 Warning: readfile() has been disabled for security reasons in 
@@ -152,20 +147,19 @@
   </para>
 
   <sect1 id="features.safe-mode.functions">
-   <title>Functions restricted/disabled by safe mode</title>
+   <title>ôåð÷öéåú äîåâáìåú/îáåèìåú áîöá áèåç</title>
    <para>
-    This is a still probably incomplete and possibly incorrect listing
-    of the functions limited by 
+    æä ëðøàä øéùåí ìà ùìí åàåìé ìà ðëåï ùì äôåð÷öéåú äîåâáìåú á-
     <link linkend="features.safe-mode">safe mode</link>.
     <!-- TODO: add &note.sm.*; to the functions mentioned here.
     That entity should link to this section -->
     <table>
-     <title>Safe mode limited functions</title>
+     <title>ôåð÷öéåú äîåâáìåú áîöá áèåç</title>
      <tgroup cols="2">
       <thead>
        <row>
-        <entry>Function</entry>
-        <entry>Limitations</entry>
+        <entry>ôåð÷öéä</entry>
+        <entry>äâáìåú</entry>
        </row>
       </thead>
       <tbody>
@@ -191,17 +185,17 @@
        </row>
        <row>
         <entry><function>ifx_*</function></entry>
-        <entry>sql_safe_mode restrictions, (!= safe mode)</entry>
+        <entry>äâáìåú sql_safe_mode, (!= îöá áèåç)</entry>
         <!-- TODO: more info on sql-safe-mode -->
        </row>
        <row>
         <entry><function>ingres_*</function></entry>
-        <entry>sql_safe_mode restrictions, (!= safe mode)</entry>
+        <entry>äâáìåú sql_safe_mode, (!= îöá áèåç)</entry>
         <!-- TODO: more info on sql-safe-mode -->
        </row>
        <row>
         <entry><function>mysql_*</function></entry>
-        <entry>sql_safe_mode restrictions, (!= safe mode)</entry>
+        <entry>äâáìåú sql_safe_mode, (!= îöá áèåç)</entry>
         <!-- TODO: more info on sql-safe-mode -->
        </row>
        <row>
@@ -215,9 +209,9 @@
        </row>
        <row>
         <entry><function>putenv</function></entry>
-        <entry>Obeys the safe_mode_protected_env_vars and 
-        safe_mode_allowed_env_vars ini-directives. See also the documentation
-        on <function>putenv</function></entry>
+        <entry>îîìà àú äåøàåú ä-ini safe_mode_protected_env_vars å- 
+        safe_mode_allowed_env_vars. úéòåã îìà á-
+        <function>putenv</function></entry>
         <!-- TODO: document those directives in chapters/config.xml -->
        </row>
        <row>
@@ -236,41 +230,40 @@
         <entry>&sm.disabled;</entry>
        </row>
        <row>
-        <entry><link linkend="language.operators.execution">backtick operator</link></entry>
+        <entry><link linkend="language.operators.execution">äàåôøèåø "`"</link></entry>
         <entry>&sm.disabled;</entry>
        </row>
        <row>
-        <entry><function>shell_exec</function> (functional equivalent 
-        of backticks)</entry>
+        <entry><function>shell_exec</function> (ôåð÷öéä æää ìàåôøèåø "`")</entry>
         <entry>&sm.disabled;</entry>
        </row>
        <row>
         <entry><function>exec</function></entry>
-        <entry>You can only execute executables within the <link 
+        <entry>ðéúï ìäôòéì ÷áöéí ø÷ áúåê <link 
         linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
-        For practical reasons it's currently not allowed to have
-        <literal>..</literal> components in the path to the executable.</entry>
+	îñéáåú îòùéåú ìà ðéúï ëøâò ìäëéì <literal>..</literal>
+	áðúéá (Path) ääôòìä.</entry>
        </row>
        <row>
         <entry><function>system</function></entry>
-        <entry>You can only execute executables within the <link 
-        linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
-        For practical reasons it's currently not allowed to have
-        <literal>..</literal> components in the path to the executable.</entry>
+        <entry>ðéúï ìäøéõ ÷áöéí ø÷ áúåê <link 
+	linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
+	îñéáåú îòùéåú ìà ðéúï ëøâò ìäëéì <literal>..</literal>
+	áðúéá (Path) ääôòìä.</entry>
        </row>
        <row>
         <entry><function>passthru</function></entry>
-        <entry>You can only execute executables within the <link 
-        linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
-        For practical reasons it's currently not allowed to have
-        <literal>..</literal> components in the path to the executable.</entry>
+        <entry>ðéúï ìäøéõ ÷áöéí ø÷ áúåê <link 
+	linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
+	îñéáåú îòùéåú ìà ðéúï ëøâò ìäëéì <literal>..</literal>
+	áðúéá (Path) ääôòìä.</entry>
        </row>
        <row>
         <entry><function>popen</function></entry>
-        <entry>You can only execute executables within the <link 
-        linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
-        For practical reasons it's currently not allowed to have
-        <literal>..</literal> components in the path to the executable.</entry>
+        <entry>ðéúï ìäøéõ ÷áöéí ø÷ áúåê <link 
+	linkend="ini.safe-mode-exec-dir">safe_mode_exec_dir</link>.
+	îñéáåú îòùéåú ìà ðéúï ëøâò ìäëéì <literal>..</literal>
+	áðúéá (Path) ääôòìä.</entry>
         <!-- TODO: not sure. popen uses a completely different implementation
         Don't know why, don't know whether it's behaving the same -->
        </row>
@@ -292,8 +285,8 @@
        </row>
        <row>
         <entry><function>copy</function></entry>
-        <entry>&sm.uidcheck; &sm.uidcheck.dir; (on 
-        <parameter>source</parameter> and 
+        <entry>&sm.uidcheck; &sm.uidcheck.dir; (á- 
+        <parameter>source</parameter> å- 
         <parameter>target</parameter>) </entry>
        </row>
        <row>
@@ -306,8 +299,8 @@
        </row>
        <row>
         <entry><function>chmod</function></entry>
-        <entry>&sm.uidcheck; In addition, you cannot  
-        set the SUID, SGID and sticky bits</entry>
+        <entry>&sm.uidcheck; áðåñó, ìà ðéúï ì÷áåò
+        àú SUID, SGID åáéèéí ãáé÷éí (sticky bits)</entry>
        </row>
        <row>
         <entry><function>touch</function></entry>
@@ -315,27 +308,25 @@
        </row>
        <row>
         <entry><function>symlink</function></entry>
-        <entry>&sm.uidcheck; &sm.uidcheck.dir; (note: only the target is 
-        checked)</entry>
+        <entry>&sm.uidcheck; &sm.uidcheck.dir; (ø÷ äîèøä ðáã÷ú)</entry>
        </row>
        <row>
         <entry><function>link</function></entry>
-        <entry>&sm.uidcheck; &sm.uidcheck.dir; (note: only the target is 
-        checked)</entry>
+        <entry>&sm.uidcheck; &sm.uidcheck.dir; (ø÷ äîèøä ðáã÷ú)</entry>
        </row>
        <row>
         <entry><function>getallheaders</function></entry>
-        <entry>In safe mode, headers beginning with 'authorization' 
-        (case-insensitive)
-        will not be returned. Warning: this is broken with the aol-server
-        implementation of <function>getallheaders</function>!</entry>
+        <entry>áîöá áèåç, ëåúøåú-òìéåðåú (Headers) ùîúçéìåú á-'authorization'
+        (ìà îåùôò éçñä, case insensitive) 
+        ìà éåçæøå. àæäøä: æä ìà ú÷éï áâéøñú ùøú-aol ùì
+        <function>getallheaders</function>!</entry>
        </row>
         <row>
         <entry><function>header</function></entry>
-        <entry>In safe mode, the uid of the script is added to the
-        <literal>realm</literal> part of the
-        <literal>WWW-Authenticate</literal> header if you set this
-        header (used for HTTP Authentication).</entry>
+        <entry>áîöá áèåç, äîñôø äñéãåøé ùì äñ÷øéôè îúååñó ìçì÷ ä-
+        <literal>realm</literal> áëåúøú äòìéåðä
+        <literal>WWW-Authenticate</literal> àí äëåúøú äæàú ð÷áòú
+        (îùîù ìàéîåú HTTP).</entry>
        </row>
        <row>
         <entry>
@@ -343,7 +334,7 @@
          <function>show_source</function>
         </entry>
         <entry>
-         &sm.uidcheck; &sm.uidcheck.dir; (note: only affected since PHP 4.2.1)
+         &sm.uidcheck; &sm.uidcheck.dir; (îåùôò ø÷ îàæ PHP 4.2.1)
         </entry>
        </row>
        <row>
@@ -351,11 +342,11 @@
          <function>parse_ini_file</function>
         </entry>
         <entry>
-         &sm.uidcheck; &sm.uidcheck.dir; (note: only affected since PHP 4.2.1)
+         &sm.uidcheck; &sm.uidcheck.dir; (îåùôò ø÷ îàæ PHP 4.2.1)
         </entry>
        </row>
        <row>
-        <entry>Any function that uses 
+        <entry>ëì ôåð÷öéä ùîùúîùú á-
          <filename>php4/main/fopen_wrappers.c</filename>
         </entry>
         <entry>??</entry>