PHP safe mode is turned off by default in the original H-Sphere configuration.

To turn it on globally, set safe_mode=On in the php.ini file (usually, in the /usr/local/lib directory). If you want to turn it on on a per domain level, you may create/edit an .htaccess file to contain the following: "php_flag register_globals on" (without the quotes). This will allow you to control the domains that have register_globals on and not have it set on globally (which is not recommended/supported)

To use default H-Sphere configuration for PHP with safe mode on, download the default php.ini, turn the safe mode on and copy that file to the PHP installation directory (usually, /usr/local/lib).

Read more on PHP safe mode configuration in the PHP documentation.

To turn the safe mode off for an individual account, edit/add the following directive in the /hsphere/local/config/httpd/httpd.conf Apache configuration file on the Web server:

<Directory /hsphere/local/home/wwwuser>
<IfModule mod_php4.c>
php_admin_flag safe_mode off
php_admin_value upload_tmp_dir "/tmp"
php_admin_value session.save_path "/tmp"
</IfModule>
</Directory>

To have Horde web mail working when the safe mode is on, set the following directive in /hsphere/local/config/httpd/httpd.conf on the Web server:

<Directory /hsphere/shared/apache/htdocs/horde>
<IfModule mod_php4.c>
php_admin_flag safe_mode off
php_admin_value upload_tmp_dir "/tmp"
php_admin_value session.save_path "/tmp"
</IfModule>
</Directory>

To configure Webshell 4 so that it would work with the safe mode globally on:

<Directory /hsphere/shared/apache/htdocs/webshell4>
<IfModule mod_php4.c>
php_admin_flag safe_mode off
php_admin_value upload_tmp_dir "/tmp"
php_admin_value session.save_path "/tmp"
</IfModule>
</Directory>

Restart Apache after performing the necessary modifications.