Re: #27076 [Csd->Opn]: exec() with safe_mode
| From: | rschwartz@ec.rr.com | Date: | Wed, 18 Feb 2004 19:19:25 +0000 |
| Subject: | Re: #27076 [Csd->Opn]: exec() with safe_mode | ||
| References: | 1 2 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969359057@lists.php.net to get a copy of this message | ||
I added it to passthru(), shell_exec (and backticks) are disabled in
safe_mode altogether. I would image it also affects proc_open() and
popen(), I'll test and add it to those.
> > What other places does it need to be documented?
>
> Maybe for passthru(), shell_exec(), proc_open() and in the place that is
> talking about
command ?
> I didn't had the time to test it, this is why the bug is still marked as
> Open.
>
> didou
>
> >
> >> ID: 27076
> >> Updated by: didou@php.net
> >> Reported By: not at valid dot email
> >> -Status: Closed
> >> +Status: Open
> >> Bug Type: Documentation problem
> >> Operating System: linux
> >> PHP Version: Irrelevant
> >> New Comment:
> >>
> >> You didn't fix nothing here... I added an entity yesterday :
> >>
> >>
> >>
> >>
> >> http://news.php.net/article.php?group=php.doc&article=969358998
> >>
> >>
> >>
> >> This bug report is about the problem reflected by &warn.sm.exec; It's
> >> already in exec() and system() man page, but still need to be added
> >> elsewhere.
> >>
> >>
> >>
> >> didou
> >>
> >>
> >> Previous Comments:
> >> ------------------------------------------------------------------------
> >>
> >> [2004-02-17 21:31:32] irchtml@php.net
> >>
> >> This bug has been fixed in the documentation's XML sources. Since the
> >> online and downloadable versions of the documentation need some time
> >> to get updated, we would like to ask you to be a bit patient.
> >>
> >> Thank you for the report, and for helping us make our documentation
> >> better.
> >>
> >> Added the entity kennyt@php.net created to passthru() and system().
> >>
> >> ------------------------------------------------------------------------
> >>
> >> [2004-02-09 09:47:24] didou@php.net
> >>
> >> This should also be mentionned in the other functions of ref.exec.
> >> Maybe with an entity ?
> >>
> >> ------------------------------------------------------------------------
> >>
> >> [2004-01-28 15:03:42] kennyt@php.net
> >>
> >> This bug has been fixed in the documentation's XML sources. Since the
> >> online and downloadable versions of the documentation need some time
> >> to get updated, we would like to ask you to be a bit patient.
> >>
> >> Thank you for the report, and for helping us make our documentation
> >> better.
> >>
> >> I added a warning below the other safe_mode note. Thanks.
> >>
> >> ------------------------------------------------------------------------
> >>
> >> [2004-01-28 14:53:20] sniper@php.net
> >>
> >> Yes, it's a feature. Couldn't find it documented anywhere.
> >>
> >> Reclassifed as documentation problem.
> >>
> >>
> >>
> >>
> >>
> >> ------------------------------------------------------------------------
> >>
> >> [2004-01-28 12:39:16] not at valid dot email
> >>
> >> Description:
> >> ------------
> >> safe_mode cause exec command to parse all arguments after the command
> >> as one argument (in quote?)
> >>
> >>
> >>
> >> Is this a bug? is it documented somewhere?
> >>
> >>
> >>
> >> Reproduce code:
> >> ---------------
> >> <?php
> >>
> >> exec("echo x | echo y",$output);
> >>
> >> $output=implode(',',$output);
> >>
> >> echo "output is: $output"
> >>
> >> ?>
> >>
> >> Expected result:
> >> ----------------
> >> safe_mode off output is: y
> >>
> >> safe_mode on output is: y
> >>
> >> Actual result:
> >> --------------
> >> safe_mode off output is: y
> >>
> >> safe_mode on output is: x | echo y
> >>
> >>
> >> ------------------------------------------------------------------------
> >>
> >>
> >> --
> >> Edit this bug report at
> >> http://bugs.php.net/?id=27076&edit=1
> >
> >