Re: Gzipped output
| From: | Eric Butera | Date: | Mon, 11 Feb 2008 17:16:20 +0000 |
| Subject: | Re: Gzipped output | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269106@lists.php.net to get a copy of this message | ||
On Feb 11, 2008 11:58 AM, Per Jessen <per@computer.org> wrote:
> Eric Butera wrote:
>
> > You should never use exec & friends when there is another way around
> > the problem. It is a security concern.
>
> Why is it a security concern to execute another bit of code?
>
> I really fail to see any security concern in doing e.g.
>
> exec('gzip -c /tmp/myinputfile')
>
>
>
> /Per Jessen, Zürich
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
In the real world would that be your exact usage? Would the file to
be compressed be a variable by chance?