Hello,
After browsing in the CVS tree, I find the patch for this hole :
file : zend/zend_ini
277c277,278
< if (zend_hash_find(EG(ini_directives), name, name_length, (void
**) &ini_entry)==FAILURE) {
---
> if (zend_hash_find(EG(ini_directives), name, name_length, (void
**) &ini_entry)==FAILURE ||
> (stage == ZEND_INI_STAGE_RUNTIME && (ini_entry->modifiable &
ZEND_INI_USER) == 0)) {
I will try this patch this weekend on a testing server .
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
