[php-src] Issue #14889: Commands execution from php, idea(s) how to restrict from code consumer's scope
| From: | devnexen | Date: | Tue, 09 Jul 2024 12:02:31 +0000 |
| Subject: | [php-src] Issue #14889: Commands execution from php, idea(s) how to restrict from code consumer's scope | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-247260@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/14889
Author: devnexen
### Description
The original discussion stemmed from [there](https://externals.io/message/124296).
Basically how to, more effectively, restrict php process user access to system commands. Albeit the
implementation idea had been rejected, for valid reasons, it should not stop to improve in this
area. Note that calls like
execvP allows to enforce specific search paths but is even
less standard than execvpe.