popen() in php level 3?

[Cyvus]

Hey, it's not a big deal if it's a no, but I was curious about the possibility to use the popen() variable in the level 3 php.

I was looking into running a custom live ventrilo status monitor and it needs to use that variable.

 

[alfred]

It works...
It won't work if you are trying to access other servers, though. You can access it from your computer, but (i.e.) Facebook.com servers are blocked out. (it is something to do with the firewalls)

 

[Cyvus]

To be honest I'm not 100% sure what it's doing (I know what the whole thing does just not what it's trying to do at the specific point it's generating and error).

This is the message I get:

Warning:  popen() has been disabled for security reasons in /home/cyvus/public_html/ventrilo/ventrilostatus.php on line 378

and this is line 378 of the php file and a few of the following ones:

        $pipe = popen( $cmdline, "r" );
        if ( $pipe === false )
        {
            $this->m_error = "PHP Unable to spawn shell.";
            return -10;
        }

EDIT:
This is all that's displayed from the error log in the cpanel:

ALERT - function within blacklist called: popen() (attacker '*.*.*.*', file '/home/cyvus/public_html/ventrilo/ventrilostatus.php', line 378)

 

[Bryon]

I've enabled it.

Do you need help with anything else?

 

[Cyvus]

I've enabled it.

Do you need help with anything else?

Woot! Thanks Byron you rock. It's working now. :biggrin: