php system命令在网页和命令行上执行结果不一致
php system命令在网页和命令行下执行结果不一致
大家好,现在我有一个文件a.php.内容是:
- PHP code
<!-- Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter.com/ --> $str = " /opt/rpm/bin/rpm -bb --target i686--linux /tmp/test.spec"; system($str); ?>
当我用http://192.168.1.1/a.php 执行的时候结果显示:
- HTML code
<!-- Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter.com/ -->Building target platforms: i686--linux Building for target i686--linux Processing files: VTCUAL06.06C.P010-R1.0-P1
当我在命令行下用/usr/local/php a.php 执行的时候,结果显示:
- HTML code
<!-- Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter.com/ --> Building target platforms: i686--linux Building for target i686--linux Processing files: VTCUAL06.06C.P010-R1.0-P1 Finding Provides: (using /opt/rpm/lib/rpm/find-provides)... Finding Requires: (using /opt/rpm/lib/rpm/find-requires)... Wrote: /export/home/webadm/.rpm/RPMS/i686/VTCUA
也就是说在http访问模式下有三行没有显示出来:
- HTML code
<!-- Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter.com/ --> Finding Provides: (using /opt/rpm/lib/rpm/find-provides)... Finding Requires: (using /opt/rpm/lib/rpm/find-requires)... Wrote: /export/home/webadm/.rpm/RPMS/i686/VTCUA
有人知道是什么原因吗?谢谢了!!
------解决方案--------------------
这个问题好奇怪~~~~
有牛人知道吗?
------解决方案--------------------
一点不奇怪,执行用户不同而已。命令行执行的是root,网页执行的是apache用户。
google了一下,说apache带--enable-suexec编译就可以,但是没试过。
------解决方案--------------------
------解决方案--------------------
------解决方案--------------------
这是不可能的。
------解决方案--------------------
看看以 php 命令行方式执行你的程序的结果
------解决方案--------------------
噢,没注意
这显然是用于权限的问题了
web 方式下的 php 只是匿名用户,只有最低的权限
话说回来,如果什么都可以通过浏览器去操控,那么系统哪有安全性可言
想当初微软为了提供便利的数据查询,给 mssql2000 附加了 url 查询功能
结果不就被人利用,而成了臭名昭著的 SQL攻击
------解决方案--------------------
都说了是权限问题,你加了sudo了没,结果怎样?
------解决方案--------------------
应该有的,如果没有你wget下载安装一个。
------解决方案--------------------
后面没有输出我怀疑可能出错了,你试试看一下代码,然后告诉我结果。
function my_exec($cmd, $input='')
{$proc=proc_open($cmd, array(0=>array('pipe', 'r'), 1=>array('pipe', 'w'), 2=>array('pipe', 'w')), $pipes);
fwrite($pipes[0], $input);fclose($pipes[0]);
$stdout=stream_get_contents($pipes[1]);fclose($pipes[1]);
$stderr=stream_get_contents($pipes[2]);fclose($pipes[2]);
$rtn=proc_close($proc);
return array('stdout'=>$stdout,
'stderr'=>$stderr,
'return'=>$rtn
);
}
$str = " /opt/rpm/bin/rpm -bb --target i686--linux /tmp/test.spec";
var_export(my_exec($str));
------解决方案--------------------

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics











The five basic components of the Linux system are: 1. Kernel, 2. System library, 3. System utilities, 4. Graphical user interface, 5. Applications. The kernel manages hardware resources, the system library provides precompiled functions, system utilities are used for system management, the GUI provides visual interaction, and applications use these components to implement functions.

VS Code One-step/Next step shortcut key usage: One-step (backward): Windows/Linux: Ctrl ←; macOS: Cmd ←Next step (forward): Windows/Linux: Ctrl →; macOS: Cmd →

To view the Git repository address, perform the following steps: 1. Open the command line and navigate to the repository directory; 2. Run the "git remote -v" command; 3. View the repository name in the output and its corresponding address.

Although Notepad cannot run Java code directly, it can be achieved by using other tools: using the command line compiler (javac) to generate a bytecode file (filename.class). Use the Java interpreter (java) to interpret bytecode, execute the code, and output the result.

There are six ways to run code in Sublime: through hotkeys, menus, build systems, command lines, set default build systems, and custom build commands, and run individual files/projects by right-clicking on projects/files. The build system availability depends on the installation of Sublime Text.

The main uses of Linux include: 1. Server operating system, 2. Embedded system, 3. Desktop operating system, 4. Development and testing environment. Linux excels in these areas, providing stability, security and efficient development tools.

To install Laravel, follow these steps in sequence: Install Composer (for macOS/Linux and Windows) Install Laravel Installer Create a new project Start Service Access Application (URL: http://127.0.0.1:8000) Set up the database connection (if required)

Installing Git software includes the following steps: Download the installation package and run the installation package to verify the installation configuration Git installation Git Bash (Windows only)
