Why does php safe mode defaults to Off in kubuntu? Other security issues?

[Jean]

I was rather surprised to see php safe mode defaults to Off in kubuntu. Why?
I was under the impression kubuntu had a rather safe lamp setup.
Are there any other security things worth mentioning?

Thanks

[kubicle]

Re: Why does php safe mode defaults to Off in kubuntu? Other security issues?

The safe mode has been deprecated from php5.3 onwards, and AFAIK will be completely removed in php6.

Due to some inherent flaws, the safe mode often provides an illusion of security, rather than actual security.

from http://php.net/manual/en/features.safe-mode.php:

Warning
This feature has been DEPRECATED as of PHP 5.3.0. Relying on this feature is highly discouraged.

[Jean]

Re: Why does php safe mode defaults to Off in kubuntu? Other security issues?

Duh, didn't know that.
Thanks.