This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Security issue urgent
#4
RE: Security issue urgent
issn't the shell_exec function disabled by default tru suhosin?
So if you can run shell_exec you costumed Sentora and you compromised the security of Sentora yourself or suhosin is broken.

Quote:php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"

I got this message:
Quote:Warning: shell_exec() has been disabled for security reasons in /var/sentora/hostdata/zadmin/public_html/xxx_xx/test.php on line 5

When executing:
Code:
<?php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);
echo shell_exec("cat /etc/sentora/panel/cnf/db.php");
?>

My Sentora DemoMy GithubAuxio Github
Zentora themeS-Type themeCstyleX theme
flat-color-iconssmall-n-flat-icons

Sentora's development takes way too long, so i'm transitioning to HestiaCP.
Thanks given by:


Messages In This Thread
Security issue urgent - by johnnyp - 02-12-2020, 05:23 PM
RE: Security issue urgent - by Jettaman - 02-13-2020, 02:52 AM
RE: Security issue urgent - by johnnyp - 02-13-2020, 05:06 PM
RE: Security issue urgent - by Ron-e - 02-15-2020, 12:24 AM
RE: Security issue urgent - by johnnyp - 02-17-2020, 05:08 PM
RE: Security issue urgent - by Me.B - 02-17-2020, 02:49 AM
RE: Security issue urgent - by Me.B - 02-24-2020, 04:46 AM
RE: Security issue urgent - by johnnyp - 02-27-2020, 06:19 PM

Possibly Related Threads…
Thread Author Replies Views Last Post
Old issue on Daily Backup iraqiboy90 24 112 ,637 12-26-2020, 12:48 PM
Last Post: conglynina
sub-domain issue kevwebbie 15 30 ,316 12-21-2018, 05:51 PM
Last Post: kevwebbie
Wordpress "Temp Folder Missing" Issue NickNeverSleeps 5 12 ,521 12-13-2018, 09:20 PM
Last Post: ngeluis@gmail.com

Forum Jump:


Users browsing this thread: 1 Guest(s)