Ok, how dangerous is shell_exec really?

[jols]

Apparently Fantastico can not un-install a package if shell_exec is switched off.

No we do not phpsuexec installed.

Yes, we do have open_basedir restrictions enabled, along with many other security features.


Should I be concerned about switching on shell_exec just so our Fantastico users can do their un-installs?

 

[jols]

Anyone? Any thoughts?

 

[chirpy]

It's up to you to judge the benefits against the disadvantages. Turning the function off helps protect vulnerably/poorly coded PHP web scripts installed on the server, especially in a non-phpsuexec/suphp environment. The advantage of not disabling it is that fantastico functions. If you'd prefer to leave it disabled, I'd suggest lobbying netenberg.com to code their removal scripts using php functions instead of relying on shell.

 

[mrprez]

Another advantage is that users will be more likely to remove unwanted scripts rather than leaving them sit there not being used or updated. This to me causes more security issues than having shell_exec activated.

 

[brianoz]

Isn't it possible to switch on shell_exec just for Fantastico?

Regardless I wouldn't allow shell_exec() without suphp or phpsuexec (but then I wouldn't allow PHP without suphp or phpsuexec!).

 

[jols]

Isn't it possible to switch on shell_exec just for Fantastico?

I only wish this were the case.

Netenberg says that you must switch shell_exec on for the entire server just so Fantastico can un-install packages. IMO this is by far the worst thing about Fantastico.

 

[brianoz]

That sounds like a generic answer, I'd want to dig further. As far as I know the version of PHP that runs for WHM is a different binary? Maybe it runs as mod_php? If so, you could use a .htaccess file and php_flag settings to enable shell_exec. If not, you could probably add a php.ini file somewhere else.

 

[verdon]

or just avoid fantastico altogether

 

[Infopro]

I only wish this were the case.

Netenberg says that you must switch shell_exec on for the entire server just so Fantastico can un-install packages. IMO this is by far the worst thing about Fantastico.

Well, that's not exactly what they said to you.


http://www.netenberg.com/forum/index.php?topic=6132.0

Can you enable phpsuexec? Is this an option?

or use suphp.

without one of those enabled, fantasico cannot reliably remove scripts that it has installed. If you wish to leave the exec feature disabled, you should be prepared to help your users manually remove scripts when they are done with them.

Regards,

Either suggestion sound like sound ideas to me.

And I agree with MaraBlue in that thread. No problems here to speak of. (so far to date)