note 74747 added to function.posix-setuid

From: Date: Thu, 26 Apr 2007 01:25:08 +0000
Subject: note 74747 added to function.posix-setuid
Groups: php.notes 
Request: Send a blank email to php-notes+get-125873@lists.php.net to get a copy of this message
In response to a note above that advocated the user of system() in a setuid program written in C, this is generally a bad idea for security. You should use the standard library calls like execl() instead because system() can be manipulated to execute the wrong thing using the SHELL, IFS and possibly other variables. ---- Server IP: 69.147.83.197 Probable Submitter: 74.59.77.234 ---- Manual Page -- http://www.php.net/manual/en/function.posix-setuid.php Edit -- https://master.php.net/note/edit/74747 Del: integrated -- https://master.php.net/note/delete/74747/integrated Del: useless -- https://master.php.net/note/delete/74747/useless Del: bad code -- https://master.php.net/note/delete/74747/bad+code Del: spam -- https://master.php.net/note/delete/74747/spam Del: non-english -- https://master.php.net/note/delete/74747/non-english Del: in docs -- https://master.php.net/note/delete/74747/in+docs Del: other reasons-- https://master.php.net/note/delete/74747 Reject -- https://master.php.net/note/reject/74747 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#125873) next »