[TYPO3-dev] cc_awstats: Substition for escapeshellcmd and passthru needed

Christopher Christopher at temporaryforwarding.com
Sat Jul 19 19:03:27 CEST 2008


Hi Masi,

"Martin Kutschker" <masi-no at spam-typo3.org> schrieb im Newsbeitrag 
news:mailman.1.1216486566.31760.typo3-dev at lists.netfielders.de...
> Christopher schrieb:
>> Hi guys,
>>
>> I am using cc_awstats and have a problem with it:
>>
>> The extension contains the following code:
>> if (!t3lib_div::GPvar(dbg)) {
>>     passthru($perl.'
>> '.$this->MCONF['awstatsFullDir'].$this->MCONF['awstatsScript'].escapeshellcmd
>> ($parameter), $retval);
>>    }
>> (found in typo3conf/ext/cc_awstats/mod1/index.php on line 272)
>>
>> On my server passthru and escapeshellcmd are deactivated (which I cannot
>> change).
>> How can I change the above lines so that it works anyway?
>
> If the admin deactivated these function he probably has deactivated all
> execution of binaries for PHP.

No, I can use exec instead of passthru, but is there a difference so that it 
won't work correctly afterwards?
I can neither use escapeshellcmd nor escapeshellarg. Leaving this out would 
be insecure I fear?

Christopher 






More information about the TYPO3-dev mailing list