note 74747 added to function.posix-setuid
| From: | reuben at nospamme | Date: | Thu, 26 Apr 2007 01:25:08 +0000 |
| Subject: | note 74747 added to function.posix-setuid | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-125873@lists.php.net to get a copy of this message | ||
In response to a note above that advocated the user of system() in a setuid program written in C,
this is generally a bad idea for security.
You should use the standard library calls like execl() instead because system() can be manipulated
to execute the wrong thing using the SHELL, IFS and possibly other variables.
----
Server IP: 69.147.83.197
Probable Submitter: 74.59.77.234
----
Manual Page -- http://www.php.net/manual/en/function.posix-setuid.php
Edit -- https://master.php.net/note/edit/74747
Del: integrated -- https://master.php.net/note/delete/74747/integrated
Del: useless -- https://master.php.net/note/delete/74747/useless
Del: bad code -- https://master.php.net/note/delete/74747/bad+code
Del: spam -- https://master.php.net/note/delete/74747/spam
Del: non-english -- https://master.php.net/note/delete/74747/non-english
Del: in docs -- https://master.php.net/note/delete/74747/in+docs
Del: other reasons-- https://master.php.net/note/delete/74747
Reject -- https://master.php.net/note/reject/74747
Search -- https://master.php.net/manage/user-notes.php