ID: 22481
User updated by: stefano dot cecconi at staff dot aruba dot it
Reported By: stefano dot cecconi at staff dot aruba dot it
-Status: Bogus
+Status: Open
Bug Type: COM related
Operating System: windows 2000
PHP Version: 4.2.3
New Comment:
The problem is simple : there are a lot of COM calls that are able to
hang inetinfo and even the entire server.
That's why i'm looking for a way to disable COM calls.
I'm using the php.exe version instead of the isapi one.
That's an example code that is able to kill inetinfo :
<?php
$message = new COM('CDO.Message');
$message->To = 'test';
$message->From = '[EMAIL PROTECTED]';
$message->Subject = 'test';
$message->HTMLBody = '<html><body>test</body></html>';
$message->AddAttachment('test');
$message->Send();
?>
It's very difficult to disable COM using os permissions without
disabling it for other languages too. I need to disable COM calls for
php only, because this support is very dangerous for server stability.
On a web hosting server always will be someone using wrong or dangerous
code.
I think it's better to add the choice in the php.ini instead of ask
people to recompile php.exe without COM support.
Previous Comments:
------------------------------------------------------------------------
[2003-03-01 10:13:40] [EMAIL PROTECTED]
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php
guess why it's called 'dcom' :)
there's no way to disable com beside compiling php without the com
extension, but there's also no reason to do so because you can always
handle this via acls.
------------------------------------------------------------------------
[2003-02-28 12:15:54] stefano dot cecconi at staff dot aruba dot it
Setting com.allow_dcom = false doesn't disable com calls.
$dbc = new COM("ADODB.Connection");
It works if either allow_dcom is on or off
Maybe there is another way to disable com calls?
Stefano
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=22481&edit=1
