From: egoh at flexwebhosting dot nl Operating system: Fedora Core 1 PHP version: 4.3.7 PHP Bug Type: *General Issues Bug description: In safemode, exec/system doesn't find commands between ticks
Description: ------------ When running in safemode, you can't call a command like: '/usr/bin/convert' . When safemode is off this does work. It is causing some common scripts to fail, cause they use the hooks to allow people to use spaces or other special signs in the path. Reproduce code: --------------- <? $command="'/usr/bin/convert'"; exec($command,$results,$status); print_r($results); echo $status; ?> Expected result: ---------------- The convert command to be executed. Actual result: -------------- Exec returns 127 file not found status. -- Edit bug report at http://bugs.php.net/?id=28811&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=28811&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=28811&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=28811&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=28811&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=28811&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=28811&r=needscript Try newer version: http://bugs.php.net/fix.php?id=28811&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=28811&r=support Expected behavior: http://bugs.php.net/fix.php?id=28811&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=28811&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=28811&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=28811&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28811&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=28811&r=dst IIS Stability: http://bugs.php.net/fix.php?id=28811&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=28811&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=28811&r=float
