Hello,
I don't allow my webserver to run operating system commands, so i
disabled exec() as my default configuration. There are two places i
found owncloud is using /exec()/ one is in /apps/media/lib_scanner.php/
used to call /mp3info/, to get the metadata of mp3 files.
Maybe it would be nice to use the 3rd party library getid3 (
http://getid3.sourceforge.net/)?
The other place i found was in /lib/util.php/, the method
/checkServer()/ (Line 183) want's to know which user is running the
webserver, but the result is never used (as far as i can see). Maybe
this is even uneccessary and would be great if it dissapears.
Thank to all of you.
Yours,
bbk
_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud