note 9528 added to popen
| From: | jwilkins at bitland dot net | Date: | Thu, 09 Nov 2000 18:02:14 +0000 |
| Subject: | note 9528 added to popen | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-7540@lists.php.net to get a copy of this message | ||
Be _CAREFUL_ with this one.. popen() is potentially really bad from a security standpoint.. if you
allow any parameter to be passed in from user input, then it is possible for the user to execute
arbitrary commands as the account that the webserver is running as.
for an example, check http://www.bitland.net/article.php?sid=1&mode=thread&order=0
http://www.php.net/manual/function.popen.php