BuddyPress.org

And why is it not good to turn off PHP safe_mode?

Given that PHP itself is set to deprecate or even remove the function from the next version.

Given that server security – according to those that appear to understand the subject – is something that can and should only be handled at the server level and not by a scripting engine.