php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #28784 php.ini: disable_functions does not work at all
Submitted: 2004-06-14 23:18 UTC Modified: 2004-06-15 09:10 UTC
From: dietrich dot ayala at foundstone dot com Assigned:
Status: Not a bug Package: *Configuration Issues
PHP Version: 4.3.7 OS: windows xp
Private report: No CVE-ID: None
 [2004-06-14 23:18 UTC] dietrich dot ayala at foundstone dot com
Description:
------------

os: winxp
webserver: iis/fastcgi

i set the disable_functions option in php.ini to a value of: call_user_func_array

then i restart iis, make sure no php.exe instances are running.

then i try my repro code below, and it works fine. it should not let me use this function.

Reproduce code:
---------------
<?php

function test($arg)
{
	echo $arg;
}

$arr = array('hello world');

call_user_func_array('test', $arr);

?>

Expected result:
----------------
should not let the user use the call_user_func_array function

Actual result:
--------------
prints "hello world"

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-06-14 23:48 UTC] sesser@php.net
Please double check the position of php.ini or if you made any typo in it.

disable_functions works fine here on linux and windows.

 [2004-06-14 23:57 UTC] dietrich dot ayala at foundstone dot com
user error. i have several versions of php on this box, and updated the wrong php.ini.

sorry for the inconvenience, please close.
 [2004-06-15 09:10 UTC] derick@php.net
User error -> Bogus
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu Mar 28 16:01:29 2024 UTC