Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bludit should check for (critical) disabled functions #1516

Open
joho1968 opened this issue Jun 8, 2023 · 1 comment
Open

Bludit should check for (critical) disabled functions #1516

joho1968 opened this issue Jun 8, 2023 · 1 comment
Labels
New request Request for next versions of Bludit. v3.x v4.x

Comments

@joho1968
Copy link

joho1968 commented Jun 8, 2023

Describe your problem

I typically use PHP-FPM, and for each instance, I have something like this:

php_admin_value[disable_functions] = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source,symlink,define_syslog_variables,posix_getpwuid,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_setuid,posix_uname,proc_close,pclose,proc_nice,proc_terminate,show_source,socket_create,socket_listen,socket_write,socket_close,ftp_connect,ftp_ssl_connect,ftp_login,fam_open,fam_close,ldap_connect,ldap_close,fsockopen,dns_get_mx,dns_get_record,getservbyname,pfsockopen,ssh2_connect,ssh2_disconnect,ssh2_exec,ssh2_sftp,ssh2_shell,msg_send,imap_open,imap_close"

So I really think the installer, or some "pre-check script" should be able to detect if function_exists(), at least for things some people may want to disable for security reasons. My two cents.

Steps to reproduce the problem

In this particular case, I was editing content, with no content being saved. So checking php.log, I see this:

PHP Fatal error: Uncaught Error: Call to undefined function symlink() in /home/html/mydomain.com/public_html/bl-kernel/pages.class.php:161

Bludit version

3.14.1

Hosting or Webserver name

Apache/2.4.41 (Ubuntu)

PHP version

8.1.18 (fpm)

PHP logs

See above

@dignajar dignajar added New request Request for next versions of Bludit. v4.x v3.x labels Jul 10, 2023
@dignajar
Copy link
Member

Related issue with symlink, #1467

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
New request Request for next versions of Bludit. v3.x v4.x
Development

No branches or pull requests

2 participants