Re: blocking exec() silently
| From: | Nathan Nobbe | Date: | Thu, 13 Sep 2007 03:34:21 +0000 |
| Subject: | Re: blocking exec() silently | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-262072@lists.php.net to get a copy of this message | ||
i dont know why you wouldnt just use the
disable_functions directive in php.ini
disable_functions = "exec"
this will indeed raise an error, well a warning rather, from my test
[12-Sep-2007 19:22:24] PHP Warning: exec() has been disabled for security
reasons
but i always suppress warnings and errors to the browser in production
anyway, which is good practice. i dont see a problem letting the warnings
spit out in preproduction either, then
developers would get the hint..
-nathan
in /home/nathan/testDisable.php on line 2
On 9/12/07, Samuel Vogel <samy-delux@gmx.de> wrote:
>
> Hey guys,
>
> Actually I'm still looking for a way to block for example the exec()
> function without throwing an error!
> Since there seems to be no way to do this, without hacking the code of
> php, it seems like that is what I'll have to do...
>
> Do you people think it would be a good way to just look for where the
> exec() function is defined in the source and then just empty it out an
> let it return true or whatever value it normaly returns?
> Or would there be a better, different way?
>
> And could some of you devs, just give me a short hint where to look for
> example for the exec() function in the source, since I never looked into
> php?
>
> Regards,
> Samy
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>