Re: Commands which call exec() or shell_exec() ??
| From: | Daniel Brown | Date: | Tue, 09 Apr 2013 19:39:55 +0000 |
| Subject: | Re: Commands which call exec() or shell_exec() ?? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-320807@lists.php.net to get a copy of this message | ||
On Tue, Apr 9, 2013 at 3:11 PM, Ken Kixmoeller <phphelp@comcast.net> wrote:
> Hi -- -
>
> Strange problem. One of my applications was just moved to a new server. The
> new server has php configured to blacklist some functions (using
> "disable_functions="). One of the "banned" functions is exec().
>
> The error log is reporting "shell_exec() has been disabled for security
> reasons" --- but exec() or shell_exec() are not in my code *anywhere*. The
> program and line number being reported makes absolutely no sense.
>
> Are there other php commands that really call exec() or shell_exec() ???
> Any clues how this could happen? Fixes (other than un-blacklisting the
> command, of course)?
>
> Many thanks,
>
> Ken
If you're positive you aren't executing any command line code
(backticks, passthru(), et cetera), then check to see if arbitrary
code is somehow being attempted via your scripts.
--
</Daniel P. Brown>
Network Infrastructure Manager
http://www.php.net/