ID: 3285
Updated by: sterling
Reported By: [EMAIL PROTECTED]
Old Status: Open
Status: Closed
Bug Type: Feature/Change Request
PHP Version: 4.0
New Comment:

popen() can do this fine (except for stderr), this won't be implemented
in exec() though...


Previous Comments:
------------------------------------------------------------------------

[2001-02-10 14:00:51] [EMAIL PROTECTED]

refiled against 4.0.

------------------------------------------------------------------------

[2000-01-22 17:29:32] [EMAIL PROTECTED]

There is no way to execute a command, feed it stuff on standard in,
retrive the return code, standard out, and standard error.  exec()
should probably have two additional arguments, an array for the output
sent to standard error, and a string to be passed to to the child on
standard in.

I could always pass arguments to commands, instead of having them read
from standard in.  However, this is not a good idea from a security
standpoint as argument values are visible to anybody on the system.

In my particular case, I've got a specialized, suid root, password
change program I'd like to invoke from php.  This program takes a
password on standard in.  If I don't give up and use perl, I'll
probably use popen() and output redirection to guarenteed unique file
names in /tmp to capture stdout and stderr, along with an echo of $? to
get the return code.  In my case this will probably work.  In the
general case writing to the file system could be a security problem.
Certainlly it's a big hassle.

------------------------------------------------------------------------



Edit this bug report at http://bugs.php.net/?id=3285&edit=1


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to