#48345 [Asn->Csd]: system() function docs: how to prevent cmd.exe

ID: 48345 Updated by: vrana@php.net Reported By: giosp at panozzo dot it -Status: Assigned +Status: Closed Bug Type: Documentation problem Operating System: Windows 2003 PHP Version: Irrelevant Assigned To: kalle New Comment: This bug has been fixed in the documentation's XML sources. Since the online and downloadable versions of the documentation need some time to get updated, we would like to ask you to be a bit patient. Thank you for the report, and for helping us make our documentation better. Previous Comments: ------------------------------------------------------------------------ [2009-05-21 18:09:53] giosp at panozzo dot it - ------------------------------------------------------------------------ [2009-05-20 15:49:44] giosp at panozzo dot it Description: ------------ In the documentation of system(), exec(), shell_exec(), popen(), passthru() and other external proces execution function there should be the following notes: 1. All these functions does not execute the requested process directly: they execute a shell (cmd.exe ? bash ? which criteria is used ? %COMSPEC% in windows ?). 2. Executing the standard CMD.EXE in windows is not possible when running as a non administrator user, so these function will fail in a standard IIS environment, where the current PHP script is executed as ISUR_MACHINENAME 3. The only secure way to execute a process in windows bypassing cmd.exe, is to use the proc_open() function with the option "bypass_shell" Reproduce code: --------------- --- From manual page: function.system --- <?php passthru("ping www.hp.com"); ?> Expected result: ---------------- A typical ping output Actual result: -------------- Warning: passthru() [function.passthru]: Unable to fork [ping www.hp.com] in C:\Inetpub\wwwroot\prova.php on line 2 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=48345&edit=1