note 71481 added to language.operators.execution

Sometimes, even when safe_mode is disabled (off in phpinfo()), the backticks don't work: <?php # SHELL is set to /sbin/nologin: echo "old system shell is ", $_SERVER["SHELL"], "<br />"; $output = ls -al; echo "<pre>$output</pre>"; # Empty output $_SERVER["SHELL"] = "/bin/sh"; echo "new system shell is ", $_SERVER["SHELL"], "<br />"; $output = ls -al; echo "<pre>$output</pre>"; # Still empty output! ?> Which shell is actually being spawned? Not the one in $_SERVER["SHELL"]? Or is that value read-only? ---- Server IP: 212.124.37.9 Probable Submitter: 213.146.115.42 ---- Manual Page -- http://www.php.net/manual/en/language.operators.execution.php Edit -- https://master.php.net/note/edit/71481 Del: integrated -- https://master.php.net/note/delete/71481/integrated Del: useless -- https://master.php.net/note/delete/71481/useless Del: bad code -- https://master.php.net/note/delete/71481/bad+code Del: spam -- https://master.php.net/note/delete/71481/spam Del: non-english -- https://master.php.net/note/delete/71481/non-english Del: in docs -- https://master.php.net/note/delete/71481/in+docs Del: other reasons-- https://master.php.net/note/delete/71481 Reject -- https://master.php.net/note/reject/71481 Search -- https://master.php.net/manage/user-notes.php