From owner-freebsd-isp@FreeBSD.ORG Tue Jul 26 16:48:55 2005 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A297516A41F for ; Tue, 26 Jul 2005 16:48:55 +0000 (GMT) (envelope-from freebsd-isp@chef-ingenieur.de) Received: from mta.webmatic.de (mta.webmatic.de [212.78.99.126]) by mx1.FreeBSD.org (Postfix) with ESMTP id 70DC143D45 for ; Tue, 26 Jul 2005 16:48:53 +0000 (GMT) (envelope-from freebsd-isp@chef-ingenieur.de) Received: (qmail 24102 invoked by uid 1003); 26 Jul 2005 16:48:50 -0000 Received: from freebsd-isp@chef-ingenieur.de by mta.webmatic.de by uid 89 with qmail-scanner-1.22 (spamassassin: 2.63. Clear:RC:1(217.186.9.74):. Processed in 0.068049 secs); 26 Jul 2005 16:48:50 -0000 Received: from unknown (HELO ?172.21.1.12?) (freebsd-stable@chef-ingenieur.de@217.186.9.74) by mta.webmatic.de with (DHE-RSA-AES256-SHA encrypted) SMTP; 26 Jul 2005 16:48:50 -0000 Message-ID: <42E66986.4080004@chef-ingenieur.de> Date: Tue, 26 Jul 2005 18:49:10 +0200 From: Thomas Krause User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: de-DE, de, en-us, en MIME-Version: 1.0 To: David Hogan Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-isp@freebsd.org, "'Gustavo A. Baratto'" Subject: Re: preventing a user to start a process X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2005 16:48:55 -0000 David Hogan schrieb: >>-----Original Message----- >>From: owner-freebsd-isp@freebsd.org [mailto:owner-freebsd-isp@freebsd.org] >>On Behalf Of Thomas Krause > > > >>I've searched all php-files for the system()-funktion - it's not >>possible for me do disable this function. > > > Can't you just use the 'disable_functions =' option in php.ini to disable > the php functions that can be used to spawn processes ? > > You could use it to disable at least the following functions: > > system() > exec() > passthru() > popen() > pcntl_exec() > shell_exec() > Unfortunately, that is not possible. E.g. typo3 calls Imagemagick, so I need system(). Regards, Thomas.