From: waazup at hotmail dot com
Operating system: Linux
PHP version: 4.3.3
PHP Bug Type: Unknown/Other Function
Bug description: warning for disable functions is incorrect
Description:
------------
if you disable functions using the php.ini variable
disable_functions and you seperate the functions using commas when you get
a warning for attempting to use those functions it incorrectly displays
multiple function names.
I have disable_functions set as:
disable_functions = system, exec, passthru, proc_open, shell_exec, popen
If i create a test script:
<?
system("ls");
exec("ls");
?>
I get the following output:
Warning: system, exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been disabled
for security reasons in /pathtoscript/test.php on line 3
The expected output should just show the single function name which you
are trying to use.
Expected result:
----------------
Warning: system() has been disabled for security reasons in
/pathtoscript/test.php on line 2
Warning: exec() has been disabled for security reasons in
/pathtoscript/test.php on line 3
Actual result:
--------------
Warning: system, exec, passthru, proc_open, shell_exec, popen() has been
disabled for security reasons in /pathtoscript/test.php on line 2
Warning: exec, passthru, proc_open, shell_exec, popen() has been disabled
for security reasons in /pathtoscript/test.php on line 3
--
Edit bug report at http://bugs.php.net/?id=26707&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=26707&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=26707&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=26707&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=26707&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=26707&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=26707&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=26707&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=26707&r=support
Expected behavior: http://bugs.php.net/fix.php?id=26707&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=26707&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=26707&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=26707&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=26707&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=26707&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=26707&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=26707&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=26707&r=float
