Re: whoami explanation
| From: | Michael A. Peters | Date: | Wed, 04 Mar 2009 01:01:20 +0000 |
| Subject: | Re: whoami explanation | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-289210@lists.php.net to get a copy of this message | ||
Michael A. Peters wrote:
With respect to value of issuing shell commands from within php - I'm sure there are some legitimate uses. I use to do it all the time but now I really try not to because it makes the php less portable.You also have to be super careful with your code so that use of the shell doesn't open you up to a cracker being able to execute a local exploit.