ID: 26707
Updated by: iliaa@php.net
Reported By: waazup at hotmail dot com
-Status: Assigned
+Status: Closed
Bug Type: Unknown/Other Function
Operating System: Linux
PHP Version: 4.3.3
Assigned To: iliaa
New Comment:
This bug has been fixed in CVS.
In case this was a PHP problem, snapshots of the sources are packaged
every three hours; this change will be in the next snapshot. You can
grab the snapshot at http://snaps.php.net/.
In case this was a documentation problem, the fix will show up soon at
http://www.php.net/manual/.
In case this was a PHP.net website problem, the change will show
up on the PHP.net site and on the mirror sites in short time.
Thank you for the report, and for helping us make PHP better.
Previous Comments:
------------------------------------------------------------------------
[2003-12-23 16:00:08] waazup at hotmail dot com
Description:
------------
if you disable functions using the php.ini variable
disable_functions and you seperate the functions using commas when you
get a warning for attempting to use those functions it incorrectly
displays multiple function names.
I have disable_functions set as:
disable_functions = system, exec, passthru, proc_open, shell_exec,
popen
If i create a test script:
<?
system("ls");
exec("ls");
?>
I get the following output:
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
The expected output should just show the single function name which you
are trying to use.
Expected result:
----------------
Warning: system() has been disabled for security reasons in
/pathtoscript/test.php on line 2
Warning: exec() has been disabled for security reasons in
/pathtoscript/test.php on line 3
Actual result:
--------------
Warning: system, exec, passthru, proc_open, shell_exec, popen() has
been disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 3
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=26707&edit=1