RetroBBS - comp.lang.php - Re: Only Allow exec in CLI

Re: Only Allow exec in CLI

<a6eeded5-6948-48a1-8b16-2af3b68aa60cn@googlegroups.com>

https://www.rocksolidbbs.com/devel/article-flat.php?id=297&group=comp.lang.php#297

X-Received: by 2002:a05:6214:174a:: with SMTP id dc10mr3580948qvb.60.1627027307004;
Fri, 23 Jul 2021 01:01:47 -0700 (PDT)
X-Received: by 2002:a25:d207:: with SMTP id j7mr4590669ybg.346.1627027306809;
Fri, 23 Jul 2021 01:01:46 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.snarked.org!Xbb.tags.giganews.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.lang.php
Date: Fri, 23 Jul 2021 01:01:46 -0700 (PDT)
In-Reply-To: <6722b470-b251-42d8-82dc-cd4ab8762c38@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=193.40.120.146; posting-account=s3OxiwkAAABE2kqiXXKi7ZVC4Hsq_zQz
NNTP-Posting-Host: 193.40.120.146
References: <1f781456-ae7b-441a-9a07-237a5a99624d@googlegroups.com>
<acat7lF9jluU1@mid.uni-berlin.de> <k3ph16$7ur$5@news.albasani.net> <6722b470-b251-42d8-82dc-cd4ab8762c38@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <a6eeded5-6948-48a1-8b16-2af3b68aa60cn@googlegroups.com>
Subject: Re: Only Allow exec in CLI
From: ya12983@mail.com (Mi Na)
Injection-Date: Fri, 23 Jul 2021 08:01:46 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
Lines: 83

by: Mi Na - Fri, 23 Jul 2021 08:01 UTC

Ryan kirjutas neljapäev, 27. september 2012 kl 20:23:15 UTC+3:
> On Monday, September 24, 2012 4:43:34 AM UTC-7, The Natural Philosopher wrote:
> > M. Strobel wrote:
> >
> > > Am 24.09.2012 01:14, schrieb cph:
> >
> > >> For security I am looking to add exec() and similar commands to the disable functions
> >
> > >> setting in php.ini but I do have a need to execute command line commands within a
> >
> > > cron job I am writing in PHP.
> >
> > >
> >
> > > The answer is highly dependent on your system setup, as has been said already.
> >
> > > I would start with a check to see if different .ini files for web server and CLI are
> >
> > > in place already.
> >
> > >
> >
> > > /Str.
> >
> >
> >
> > I cant imagine why anyone would put PHP in a cron job to start with.
> >
> >
> >
> > Shell script or C, or both...
> >
> >
> >
> > --
> >
> > Ineptocracy
> >
> >
> >
> > (in-ep-toc’-ra-cy) – a system of government where the least capable to
> >
> > lead are elected by the least capable of producing, and where the
> >
> > members of society least likely to sustain themselves or succeed, are
> >
> > rewarded with goods and services paid for by the confiscated wealth of a
> >
> > diminishing number of producers.
> idk about the OP but if its me I'm a PHP developer not a C developer, I wouldn't know what to do in C. I'm not even all the good at shell script for that matter.

👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽👽

Debug is human, de-fix divine.

devel / comp.lang.php / Re: Only Allow exec in CLI