Re: [PHP] Commands which call exec() or shell_exec() ??
[email protected] (Daniel Brown)
| Newsgroups | php.general |
|---|---|
| Message-ID | <CAD9cneMtexVMjdC=W+LX4A2ZVUaffbu_RabHF2_YFiHydjHTcQ@mail.gmail.com> |
On Tue, Apr 9, 2013 at 3:11 PM, Ken Kixmoeller <[email protected]> wrote: > Hi -- - > > Strange problem. One of my applications was just moved to a new server. The > new server has php configured to blacklist some functions (using > "disable_functions="). One of the "banned" functions is exec(). > > The error log is reporting "shell_exec() has been disabled for security > reasons" --- but exec() or shell_exec() are not in my code *anywhere*. The > program and line number being reported makes absolutely no sense. > > Are there other php commands that really call exec() or shell_exec() ??? > Any clues how this could happen? Fixes (other than un-blacklisting the > command, of course)? > > Many thanks, > > Ken If you're positive you aren't executing any command line code (backticks, passthru(), et cetera), then check to see if arbitrary code is somehow being attempted via your scripts. -- </Daniel P. Brown> Network Infrastructure Manager http://www.php.net/