note 71481 deleted from language.operators.execution by nlopess

From: Date: Fri, 01 Dec 2006 12:58:19 +0000
Subject: note 71481 deleted from language.operators.execution by nlopess
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-120215@lists.php.net to get a copy of this message
Note Submitter: Farid H. ---- Sometimes, even when safe_mode is disabled (off in phpinfo()), the backticks don't work: <?php # SHELL is set to /sbin/nologin: echo "old system shell is ", $_SERVER["SHELL"], "<br />"; $output = ls -al; echo "<pre>$output</pre>"; # Empty output $_SERVER["SHELL"] = "/bin/sh"; echo "new system shell is ", $_SERVER["SHELL"], "<br />"; $output = ls -al; echo "<pre>$output</pre>"; # Still empty output! ?> Which shell is actually being spawned? Not the one in $_SERVER["SHELL"]? Or is that value read-only?

« previous php.notes (#120215) next »