#26707 [Opn->Fbk]: warning for disable functions is incorrect
| From: | iliaa@php.net | Date: | Tue, 23 Dec 2003 22:11:19 +0000 |
| Subject: | #26707 [Opn->Fbk]: warning for disable functions is incorrect | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-52449@lists.php.net to get a copy of this message | ||
ID: 26707
Updated by: iliaa@php.net
Reported By: waazup at hotmail dot com
-Status: Open
+Status: Feedback
Bug Type: Unknown/Other Function
Operating System: Linux
PHP Version: 4.3.3
New Comment:
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
Expected behaviour
Previous Comments:
------------------------------------------------------------------------
[2003-12-23 16:00:08] waazup at hotmail dot com
Description:
------------
if you disable functions using the php.ini variable
disable_functions and you seperate the functions using commas when you
get a warning for attempting to use those functions it incorrectly
displays multiple function names.
I have disable_functions set as:
disable_functions = system, exec, passthru, proc_open, shell_exec,
popen
If i create a test script:
<?
system("ls");
exec("ls");
?>
I get the following output:
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
The expected output should just show the single function name which you
are trying to use.
Expected result:
----------------
Warning: system() has been disabled for security reasons in
/pathtoscript/test.php on line 2
Warning: exec() has been disabled for security reasons in
/pathtoscript/test.php on line 3
Actual result:
--------------
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26707&edit=1