Safe Mode test issue

Hi,

First off, thank you for this wonderful tool. I've been a proud user for many years.

Recently my shared hosting environment did some upgrades causing the setting safe_mode to be expressed as "off". In your file "email_message.php" on line 690, you test for safe mode using the following syntax:

if(function_exists("ini_get") && ini_get("safe_mode"))
return($this->OutputError("it is not possible to set the Return-Path header due to PHP safe mode restrictions"));

In my current setup, this causes safe_mode to be validated as "true", while it is clearly off. No idea why suddenly safe mode isn't expressed as 0 or false anymore.

Right now I've just removed this line, but I feel bad messing up your work. Could you please take this into account in future versions of your script?

Thanks in advance.

I just tried it here and it does not matter if you put off or Off in safe mode value.

What PHP version are you using?

Hi,

Please see my little test here: http://www.chocolata.be/smtest.php

This is the code of smtest.php
<?php
if(function_exists("ini_get") && ini_get("safe_mode")) {
echo 'Safe mode ON; value is '.ini_get("safe_mode");
} else {
echo 'Safe mode OFF; value is '.ini_get("safe_mode");
}
?>

I'm running http://chocolata.be/info.php

Here you can check the settings of my configuration: http://chocolata.be/info.php

Thank you for your follow-up.

I just tried it with PHP 5.3.3 version and it works as expected, so it does not work the way you are getting.

I noticed that you are using the Suhosin extension. I also use that extension in my development environment and it does not affect the outcome.

Still I read in several places that it may be affecting PHP installation on Ubuntu Linux.

I wonder if you can disable Suhosin in your installation and see if it works.

Hi there,

Thank you for your response. As I am on a shared hosting environment, I'm afraid I cannot disable this extension.

It is very well possible that it is just a bug. Is there no other, more elegant way to work around this bug?

I do not think it is a bug, it is probably something intentional that the Suhosin extension does, but I am afraid that only your system administrator can control.

The class itself has no other way of checking if safe mode is on or not to determine if it can set extra parameters. Anyway, that is only relevant if you are setting the message bounce address using the Return-path header. If you do not set that header, the safe mode setting becomes irrelevant.

Thank you for your time and your very clear answer. I'll look into the Suhosin extension with my system administrator.