[Tiki-devel] More disabled PHP function challenges

All - following on from my previous emails where I described how I have been
'scrabbling' to do an upgrade from 24.6 to 27.1 because my hosting company
has 'imposed' fixed disabling of several PHP functions, this note is about
two things, the first of which frankly is bonkers!

 

1. Tiki's "Server Fitness" check has been evolving over many releases and
one of its checks is to list PHP functions and their 'safeness'.  So, it
continues to say that shell_exec being Disabled is the 'safe' setting and
only if Tiki needs to run PDF from URL: WebKit (wkhtmltopdf) is this needed,
and if the other PHP software on the server can be trusted, then and only
then should this be enabled.

 

However much to my surprise, my Tiki 27.1 upgrade on my hoster, now gives
me:

 

Fatal error: Uncaught Error: Call to undefined function shell_exec() in
/blah-blah/tiki-check.php:2758 Stack trace: #0 {main} thrown in
/blah-blah/tiki-check.php on line 2758

 

So, with my hoster disabling shell_exec I can't run the 'Fitness' check to
understand why - which is obviously bonkers! 

 

So, the question this poses, is why are we proliferating the use of PHP
functions that we simultaneously say are potentially unsafe - something that
hosters obviously agree with?

 

2. I am also seeing lots of issues on my Tiki 27.1 upgrade with the
uploading of files to File galleries which I can't do at all!  I'm still
investigating, but one symptom which seems 'certain' as I have replicated it
on my 'vanilla' Tiki27.1 test system (it also uses php 8.3.14) on a local
server where I set all the same disabled PHP functions as my hoster is:
trying to access tiki-admin.php?page=fgal i.e the File Galleries main admin
screen - which just gives me a blank white screen. 

 

Obviously, I've not had had any issues on Tiki 24 and earlier, so have some
functions now deemed unsafe by my hoster 'crept' into File Gallery usage as
well??

 

Just for completeness these are what my hoster disables in 8.3.14:

allow_url_include, apache_child_terminate, apache_setenv, exec, passthru,
pcntl_exec, posix_kill, posix_mkfifo, posix_getpwuid, posix_setpgid,
posix_setsid, posix_setuid, posix_setgid, posix_seteuid, posix_setegid,
posix_uname, proc_close, proc_get_status, proc_open, proc_terminate,
shell_exec, show_source, system

 

Can anyone say if any of these functions are now being used in Tiki 27?

 

Thanks

 

Geoff

 

 

 

 



-- 
This email has been checked for viruses by AVG antivirus software.
www.avg.com

_______________________________________________
TikiWiki-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel