note 2978 deleted from system by jmoore
| From: | jmoore@php.net | Date: | Fri, 18 Aug 2000 23:30:51 +0000 |
| Subject: | note 2978 deleted from system by jmoore | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-2585@lists.php.net to get a copy of this message | ||
In safe_mode, system (and exec and popen) allows the script writer to bypass the doc_root
restriction. Shell commands can open any file their UID can access.