secure popen()
| From: | Negyesi Karoly | Date: | Sun, 10 Nov 2002 21:16:10 +0000 |
| Subject: | secure popen() | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-90764@lists.php.net to get a copy of this message | ||
Hi!
Following good advice from http://www.iu.hio.no/~mark/unix/unix.html#SEC178
I was able to modify a little mail.c . This led to a chroot'd PHP+Apache
(on a Debian Linux box) where the chroot jail does not contain any shell
but I am still able to use mail().
The popen replacement (5k source, 2K object) is coming from GNU cfengine.
What are your opinions about putting this (maybe as an option?) into the
main PHP tree?
Regards,
Karoly Negyesi