Mark Steudel wrote:
So I'm trying to run some system commands on the windows box I am working
on. And I am getting "Unable to fork" errors. So after some googling I see
that its because the internet guest user needs access to cmd.exe, my
question is how safe is it to enable this on a production/shared
environment? Anyways pointers to securely setting this up?
If it's enabled, it's enabled for everyone.
If you're calling system, make sure you use escapeshellarg and
escapeshellcmd in the relevant places.
That's not going to protect you from other peoples bad code though..
What are you trying to use system() for? Maybe there's a built in
function or another way to do what you need.
--
Postgresql & php tutorials
http://www.designmagick.com/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
