Edit report at https://bugs.php.net/bug.php?id=65026&edit=1
ID: 65026
User updated by: mbr at hlkomm dot de
Reported by: mbr at hlkomm dot de
Summary: if a function is used which is blocked by
disable_functions nothing is logged
Status: Not a bug
Type: Bug
Package: Scripting Engine problem
Operating System: Irrelevant
PHP Version: Irrelevant
Block user comment: N
Private report: N
New Comment:
sorry, it seems you are right.
Didn't know that an error handler can hide such information.
In fact this is a typo3 Installation where I inserted the code.
sorry for the inconvenience! :)
Previous Comments:
------------------------------------------------------------------------
[2013-06-13 11:27:05] mbecc...@php.net
Are you sure you didn't have some error handler catching the warning? And/or
are you sure that you modified the right php.ini using the right syntax?
e.g.
php -d disable_functions=strlen -r 'echo strlen("abc");'
PHP Warning: strlen() has been disabled for security reasons in Command line
code on line 1
------------------------------------------------------------------------
[2013-06-13 08:57:00] mbr at hlkomm dot de
Description:
------------
Today I had the issue that the use of a function was silenty ignored.
On the system the configuration directive
disable_functions exec
was set.
In a script exec was used.
Even I wrote something like:
ini_set('display_errors', 'On');
error_reporting(E_ALL);
$lastLine = exec($command, $output, $returnValue);
during debugging no INFO/WARN/ERROR was shown that the exec was blocked by
configuration.
I would expect a WARN like "Use of function exec is blocked by configuration on
line xxx" or something like this
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=65026&edit=1
