Re: blocking exec() silently

From: Date: Thu, 13 Sep 2007 03:34:21 +0000
Subject: Re: blocking exec() silently
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-262072@lists.php.net to get a copy of this message
i dont know why you wouldnt just use the disable_functions directive in php.ini disable_functions = "exec" this will indeed raise an error, well a warning rather, from my test [12-Sep-2007 19:22:24] PHP Warning: exec() has been disabled for security reasons but i always suppress warnings and errors to the browser in production anyway, which is good practice. i dont see a problem letting the warnings spit out in preproduction either, then developers would get the hint.. -nathan in /home/nathan/testDisable.php on line 2 On 9/12/07, Samuel Vogel <samy-delux@gmx.de> wrote: > > Hey guys, > > Actually I'm still looking for a way to block for example the exec() > function without throwing an error! > Since there seems to be no way to do this, without hacking the code of > php, it seems like that is what I'll have to do... > > Do you people think it would be a good way to just look for where the > exec() function is defined in the source and then just empty it out an > let it return true or whatever value it normaly returns? > Or would there be a better, different way? > > And could some of you devs, just give me a short hint where to look for > example for the exec() function in the source, since I never looked into > php? > > Regards, > Samy > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >

« previous php.general (#262072) next »