note 101957 rejected from function.ini-restore by danbrown
| From: | danbrown@php.net | Date: | Tue, 01 Feb 2011 14:04:07 +0000 |
| Subject: | note 101957 rejected from function.ini-restore by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-176560@lists.php.net to get a copy of this message | ||
Note Submitter: eli at ski-forums dot com
----
Why does this function even exist?
Hackers use this function in the following function to open up php to more attacks. I found the
below inside a virus file on one of my servers:
----------------------------------------------------
@ini_restore("safe_mode");
@ini_restore("open_basedir");
@ini_restore("safe_mode_include_dir");
@ini_restore("safe_mode_exec_dir");
@ini_restore("disable_functions");
@ini_restore("allow_url_fopen");