note 54252 added to ref.exec

The whole Windows 2003 server solution with changing permissions on cmd.exe for IUSR doesn't seem ideal IMO. It does open up serious security issues. Taking a copy and placing it in the PHP folder could potentially expose your server to exactly the same risks where a HTTP exploit could be used to access cmd.exe and then basically have the rights to run anything on your server...not good. Having your PHP install on a different drive may help things but it's still not ideal. The only other thing I could think of is using a replacement cmd.exe in c:\php with tight restrictions on where it can run things from, for example c:\myexecutables . I doubt PHP does any checks on the cmd.exe within its own folder so switching this for a different one would probably be fine. ---- Manual Page -- http://www.php.net/manual/en/ref.exec.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+54252 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+54252&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+54252&report=yes Search -- http://master.php.net/manage/user-notes.php