php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #30308 system command execution with echo()
Submitted: 2004-10-02 12:28 UTC Modified: 2004-10-02 12:57 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: czke at czke dot com Assigned:
Status: Not a bug Package: Strings related
PHP Version: Irrelevant OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: czke at czke dot com
New email:
PHP Version: OS:

 

 [2004-10-02 12:28 UTC] czke at czke dot com 
Description:
------------
It is posibble to execute system commands with echo using the  "`".
My opinion is that with  a string function this should not be posible.

Reproduce code:
---------------
<?php
echo "<pre>";
echo `ls -l /`;
?>

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-10-02 12:57 UTC] magnus@php.net 
Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions. 

Thank you for your interest in PHP.

This is a feature.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Thu Jul 17 00:01:31 2025 UTC