Bug #73921 [NEW]: disable_functions should result in fatal error
| From: | spam2 at rhsoft dot net | Date: | Thu, 12 Jan 2017 13:10:08 +0000 |
| Subject: | Bug #73921 [NEW]: disable_functions should result in fatal error | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-206556@lists.php.net to get a copy of this message | ||
From: spam2 at rhsoft dot net
Operating system:
PHP version: 7.1.0
Package: Scripting Engine problem
Bug Type: Bug
Bug description:disable_functions should result in fatal error
Description:
------------
PHP Warning: popen() has been disabled for security reasons
sorry, but that is nonsense because from the view of the script it make
sno difference if a function can't be called becaus ea typo or because
it is disabled and so completly legit code for optional features don't
work
BUT you can't try-catch warnings
private function syslog(string $message)
{
global $cms_syslog;
/** Je nach Serverkonfiguration nicht vorhanden */
try
{
/** Usernamen hinzufuegen wenn angemeldet */
if(!empty($_SESSION[CMS_HOST_HASH . '_auth_uname']))
{
$message .= " ({$_SESSION[CMS_HOST_HASH . '_auth_uname']})";
}
/** Sonderzeichen filtern */
$message = strip_tags($this->escape_logitem($message));
/** Kommando mittels "popen" ausfuehren und Rueckgabe in Variable
schreiben */
if($fp = popen($cms_syslog . ' ' . escapeshellarg($message) , 'r'))
{
pclose($fp);
return true;
}
else
{
return false;
}
}
catch(Error $e)
{
return false;
}
}
--
Edit bug report at https://bugs.php.net/bug.php?id=73921&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=73921&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=73921&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=73921&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=73921&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=73921&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=73921&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=73921&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=73921&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=73921&r=support
Expected behavior: https://bugs.php.net/fix.php?id=73921&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=73921&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=73921&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=73921&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=73921&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=73921&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=73921&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=73921&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=73921&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=73921&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=73921&r=mysqlcfg