note 101957 added to function.ini-restore

From: Date: Thu, 20 Jan 2011 01:58:26 +0000
Subject: note 101957 added to function.ini-restore
Groups: php.notes 
Request: Send a blank email to php-notes+get-175922@lists.php.net to get a copy of this message
Why does this function even exist? Hackers use this function in the following function to open up php to more attacks. I found the below inside a virus file on one of my servers: ---------------------------------------------------- @ini_restore("safe_mode"); @ini_restore("open_basedir"); @ini_restore("safe_mode_include_dir"); @ini_restore("safe_mode_exec_dir"); @ini_restore("disable_functions"); @ini_restore("allow_url_fopen"); ---- Server IP: 69.147.83.197 Probable Submitter: 174.99.72.107 ---- Manual Page -- http://www.php.net/manual/en/function.ini-restore.php Edit -- https://master.php.net/note/edit/101957 Del: integrated -- https://master.php.net/note/delete/101957/integrated Del: useless -- https://master.php.net/note/delete/101957/useless Del: bad code -- https://master.php.net/note/delete/101957/bad+code Del: spam -- https://master.php.net/note/delete/101957/spam Del: non-english -- https://master.php.net/note/delete/101957/non-english Del: in docs -- https://master.php.net/note/delete/101957/in+docs Del: other reasons-- https://master.php.net/note/delete/101957 Reject -- https://master.php.net/note/reject/101957 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#175922) next »