Re: Commands which call exec() or shell_exec() ??
| From: | Matijn Woudt | Date: | Tue, 09 Apr 2013 19:41:14 +0000 |
| Subject: | Re: Commands which call exec() or shell_exec() ?? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-320808@lists.php.net to get a copy of this message | ||
On Tue, Apr 9, 2013 at 9:11 PM, Ken Kixmoeller <phphelp@comcast.net> wrote:
> Hi -- -
>
> Strange problem. One of my applications was just moved to a new server. The
> new server has php configured to blacklist some functions (using
> "disable_functions="). One of the "banned" functions is exec().
>
> The error log is reporting "shell_exec() has been disabled for security
> reasons" --- but exec() or shell_exec() are not in my code *anywhere*. The
> program and line number being reported makes absolutely no sense.
>
> Are there other php commands that really call exec() or shell_exec() ???
> Any clues how this could happen? Fixes (other than un-blacklisting the
> command, of course)?
>
> Many thanks,
>
> Ken
>
The back tick(`) operator is also used for that same purpose. Maybe that's
in your code?
- Matijn