Re: Commands which call exec() or shell_exec() ??

From: Date: Tue, 09 Apr 2013 20:05:53 +0000
Subject: Re: Commands which call exec() or shell_exec() ??
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-320810@lists.php.net to get a copy of this message
Yes -- Thanks Matjen and Daniel --- There *was* a stray backtick in there. Weird that we haven't run into it before. Testing now. On Tue, Apr 9, 2013 at 2:41 PM, Matijn Woudt <tijnema@gmail.com> wrote: > > > > On Tue, Apr 9, 2013 at 9:11 PM, Ken Kixmoeller <phphelp@comcast.net>wrote: > >> Hi -- - >> >> Strange problem. One of my applications was just moved to a new server. >> The >> new server has php configured to blacklist some functions (using >> "disable_functions="). One of the "banned" functions is exec(). >> >> The error log is reporting "shell_exec() has been disabled for security >> reasons" --- but exec() or shell_exec() are not in my code *anywhere*. >> The >> program and line number being reported makes absolutely no sense. >> >> Are there other php commands that really call exec() or shell_exec() ??? >> Any clues how this could happen? Fixes (other than un-blacklisting the >> command, of course)? >> >> Many thanks, >> >> Ken >> > > The back tick(`) operator is also used for that same purpose. Maybe that's > in your code? > > - Matijn > >

« previous php.general (#320810) next »