Even when I have set the "safe_mode = On" in my server's php.ini file, how come my user is still able to change the settings in their php page using ini_set() function?
Is there anyway to stop them from changing values using ini_set()?
safe_mode only affects these settings:
If you want to remove a specific function so that your users cannot reset it, then try adding it to the disable_functions directive in your ini file.
safe_mode is deprecated from 5.3 and removed from 5.4
Thanks for the explanation.