#26707 [Bgs->Asn]: warning for disable functions is incorrect
| From: | iliaa@php.net | Date: | Wed, 24 Dec 2003 00:05:58 +0000 |
| Subject: | #26707 [Bgs->Asn]: warning for disable functions is incorrect | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-52453@lists.php.net to get a copy of this message | ||
ID: 26707
Updated by: iliaa@php.net
Reported By: waazup at hotmail dot com
-Status: Bogus
+Status: Assigned
Bug Type: Unknown/Other Function
Operating System: Linux
PHP Version: 4.3.3
-Assigned To:
+Assigned To: iliaa
Previous Comments:
------------------------------------------------------------------------
[2003-12-23 18:44:48] iliaa@php.net
The error is clear.
------------------------------------------------------------------------
[2003-12-23 18:34:46] waazup at hotmail dot com
Can you kindly explain how this is not a bug?
I read over the How to Report page and it's not that I do not
understand the warning message I am receiving it's that PHP is parsing
the disable_functions variable in the php.ini incorrectly.
------------------------------------------------------------------------
[2003-12-23 17:11:43] iliaa@php.net
bogusing
------------------------------------------------------------------------
[2003-12-23 17:11:19] iliaa@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
Expected behaviour
------------------------------------------------------------------------
[2003-12-23 16:00:08] waazup at hotmail dot com
Description:
------------
if you disable functions using the php.ini variable
disable_functions and you seperate the functions using commas when you
get a warning for attempting to use those functions it incorrectly
displays multiple function names.
I have disable_functions set as:
disable_functions = system, exec, passthru, proc_open, shell_exec,
popen
If i create a test script:
<?
system("ls");
exec("ls");
?>
I get the following output:
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
The expected output should just show the single function name which you
are trying to use.
Expected result:
----------------
Warning: system() has been disabled for security reasons in
/pathtoscript/test.php on line 2
Warning: exec() has been disabled for security reasons in
/pathtoscript/test.php on line 3
Actual result:
--------------
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26707&edit=1