PHP - The Exec() Function Is Disabled In Your Php By The Disabled_functions Parameter

I have a PHP script containing the function exec which works fine in PHP 4 in IIS 7 on Windows 7. However this function does not work in PHP 4 in IIS 5 on windows server 2003. But I have to make it work there because that is what we have on our web server.
Can someone provide a solution?

Hey guys I usually code in C and I started looking into PHP which I think is pretty good. I'm wondering if there's a function that can be used to execute a command from a remote server on my local machine???

As example if I'd like to have a PHP page/script running on my server which when logged onto would display me a page with buttons like "PING, NETSTAT, IPCONFIG, TRACERT" and when clicked on it would exec those commands but not on the server but from my machine??? So that I would get the PING from my local machine to google.com instead of from the server to google.com

??? making any sense ??? thanks

Hi all , here is a question about a disabled button .

If I have a button:
Code: [Select]
<input id='submit' type='submit' disabled='disabled' value='submit'>
Is it possible to change the "disabled=true" through php function ? such as

Code: [Select]
function change_button(){

echo "<script language=\"javascript\">";

echo "document.getElementById('submit').disabled=true;";

echo "</script>";

}


I tried it , not working...is this function possible or have I make any mistake ?
Thanks for every reply .

Hello

I am experiencing some issues with a function and I cannot identify the problem.
The function is not receiving any parameter.

The URL values are passed correctly.  I used echo to display the parameters outside the function and that worked.
I also used echo to display the parameters inside the function and no parameter were displayed. 
So the function is not receiving parameters. 


Code: [Select]
<?php

$find = $_REQUEST['u_find'];
$field = $_REQUEST['u_field'];
$searching = $_REQUEST['u_search'];


 echo"(1a)$find, (1b)$field, (1c)$searching";//outside function

function test_display($searching, $field, $find)
{
   echo"(2a)$find, (2b)$field, (2c)$searching";//inside function
 
}

?>

Code: [Select]
function fetch_feedback_best()
{
$sql = "SELECT
`like`
FROM `feedback`
GROUP BY `page` asc
LIMIT 10";

while($row = mysql_fetch_assoc($sql))
{
$results[] = $row;
}

return $results;
}

This doesn't work.  My error is "Warning: mysql_fetch_assoc() expects parameter 1 to be resource, string given in /blah.inc.php on line 105 ".

Code: [Select]
<?php

$results = fetch_feedback_best();

foreach ($results as $result)
{
?>
echo $result['page'];
}

?>

Hi all   Is it possible to have a function with two parameters but and then check if one is passed before using it.   In this code here I want to remove spaces and change to lowercase.   If the $extra parameter is set I want to add that to the end of the string.    

function className($nametoUse, $extra){

I'm fairly new to this and I have looked around but I can't find much information on it. Basically I know what an array and a function is but I'm currently working through an oop login and register sytem and I am seeing this quite a lot:   function myFunction($myVariable = array()){   $Firstvariable = $myVariable[0]; $Secondvariable = $myVariable[1];   //etc   }   This is really confusing me and I can't see any examples in any tutorial sites or books of an array and a function being used like this. Can someone just explain how something like this would work in simple terms? I have also checked the manual but I can't see an example an array being used like this. Any help would be much appreciated. Thanks.

HI, i'm using a class to create a database connection etc.. So I have something like this in a common.inc.php file which is include in each page $db_numbers_args = array();
$db_numbers_args['host'] = "localhost";
$db_numbers_args['user'] = "puser";
$db_numbers_args['pass'] = "nuser";
$db_numbers_args['db']   = "nu_name";
$db_numbers = new db($db_numbers_args,TRUE);   From there I can end up making query's like $res = $db_numbers->query($uqs);   So that said i'm including another file that contains all functions, when  the functions need to do database transactions I always need to put $db_numbers as a paramter to the function and each function I make.. How should I make this better ?    

If I have a parameter that has a default value, how do I pass nothing such that it uses the default value? Passing NULL does not work.

Code: [Select]
function test($to = "test@test.com", $from)
{
echo $to . "<BR>" . $from;
}

//This will NOT show "test@test.com" but instead an empty line
test( NULL, "fake@fake.com" );

One more question. So I have a function with two parameters, $x and $y. Here it is.

Code: [Select]
function dydx($x,$y){

$equation = 2 * $x;
return $equation;
}
Now here's the problem. I want $equation to be user defined. Easy enough, I use a post command and I get $equation to equal whatever the user inputs. The problem is that if I get input from the user, I'm not sure how to take that input and then have the function parameters work on it. Like if the user inputs "3*$x + 2*$y", i want to be able to let the parameters for the function dydx act on it. How could I go about doing this?

I have the following code just to insert a username and hashed password into the database but somehow I am getting this error and I couldn't find out where I am doing it wrong...can someone please give me a hand?   I tried it in two ways and both errors... the first few lines are just connecting database which worked fine and a password.php so I can use password_hash() with my php version

$hash = password_hash('xx', PASSWORD_BCRYPT, array('cost' => 10));
$username = 'xx';


$insertQuery = $db->prepare("
		INSERT INTO et_todo (username, password)
		VALUES (:username, :hash)
	");

$insertQuery->execute(array(
		'username' => $username,
		'password' => $hash
	));

also tried

$hash = password_hash('xx', PASSWORD_BCRYPT, array('cost' => 10));

$insertQuery = $db->prepare("
		INSERT INTO et_todo (username, password)
		VALUES ('xx', :hash)
	");

$insertQuery->execute(array(
		'username' => 'xx',
		'password' => $hash
	));

Hello,   I recently posted here about an issue I was having with my database orientated products page.   I have now run into another problem where say if, /db.php was typed or /db.php?p=IDoNotExist was typed, it returns blank.   I have in my code the desired content to be displayed, but it just doesn't seem to want to make a show.   I was also wondering if it is possible to show different content for whatever the URL is, so for no parameter, the content about the products, and a non existent one, maybe "Product not found"?   Here is my code:

<?php
	$db=mysql_connect  ("localhost", "webwibco_charlie",  "Hello123") or die ('I cannot connect to the database  because: ' . mysql_error()); 
	$mydb=mysql_select_db("webwibco_products"); 

	include("header.php");

	$status = htmlspecialchars( @$_GET ['p'] );

	if ($status == "floorpuzzles") {

		     echo "<h1>Our Floor Puzzles</h1>";
		$sql="SELECT  ID, Name, Tags, Description, Category FROM products WHERE Category LIKE '%" . FloorPuzzles .  "%'"; 
		$result=mysql_query($sql); 
		while($row=mysql_fetch_array($result)){ 
			$Name  =$row['Name'];
			$ID  =$row['ID']; 
			$Description  =$row['Description'];  
			echo "<div class=\"box\">";
			echo "<h1>$Name</h1>";
			echo "<div class=\"floorbox\"><a href=\"?p=$ID\"><img src=\"images/products/catalogue/big/floorpuzzles/$ID.jpg\" class=\"small\"></a></div>";
			echo "<h2>$Description</h2>";
			echo "</div>";
		}
?>
<?
}else{



	if ($status == $_GET["p"]) {
		$sql="SELECT  ID, Name, Tags, Description, Pieces, Size, Barcode, Category FROM products WHERE ID = '" . $_GET['p'] .  "'";   
		$result=mysql_query($sql);   
		while($row=mysql_fetch_array($result)){  
			$Name  =$row['Name'];
			$ID  =$row['ID']; 
			$Description  =$row['Description']; 
			$Pieces  =$row['Pieces']; 
			$Size  =$row['Size']; 
			$Barcode  =$row['Barcode'];   
			echo "<div class=\"1\">";
			echo "<h1>$Name</h1>";
			echo "<div class=\"bigbox\">";
			echo "<div class=\"floorbox\"><img src=\"images/products/catalogue/big/floorpuzzles/$ID.jpg\" class=\"big\"></div>";
			echo "</div>";
			echo "</div>";
			echo "<div class=\"2\">";
			echo "<p>Puzzle Pieces: $Pieces</p>
				  <p>Puzzle Size: $Size</p>
				  <p>Barcode: $Barcode</p>";
			echo "</div>"; 
		} 
		}else{
?>
<?
			echo"<h1>Our Products</h1>
				<p>Our jigsaw puzzles are hand cut by skilled craftsmen and therefore each one is unique with self-correcting pieces. There is a strict quality control process at all stages by our highly experienced staff. The puzzles are durable and provide fun and excitement, enhancing learning and a child’s development.<p>
				<p>All of our jigsaws are made using materials from sustainable resources grown in managed forests. Where possible we support companies in the UK and source our components locally, most of our suppliers are in the East Midlands, many in Derbyshire and Nottinghamshire. We keep packaging to a minimum and take our environmental and ethical responsibilities very seriously.</p>
				<p>Reducing waste and recycling was a way of life for us before it became fashionable. We are constantly searching for new ideas and consult teachers when developing our jigsaws, which are often used within the national curriculum.</p> 
				<p>As well as making our own range, we manufacture for leading suppliers to the education market. Check for \"Made in Britain\" and it is probably made by us.</p>
				<p>We have a wide variety of products available for viewing, from classic floor puzzles to innovative inset trays. You can take a look at all our products on this page, simply use the navigation buttons to your left.</p>";

				
				}}

include("footer.php");
?>

The final echo is what I wish to be displayed on the URL without or with an invalid parameter.   Here is my site URL: http://www.webwib.co...saws/search.php (note that only the "Floor Puzzles" category has content within it).   Thank you in advance for assistance.

i have a bash script that i was running with cron jobs:


#! /bin/bash
 start=1000
 homedir="/home/alin/NetBeansProjects/Fragger2"

 numberofprocess=`expr $start + $2`

 i=$start

 currentnumber=`ps ax |  grep index | grep -c php`

case "$1" in
  start)

        while [ $i -lt $numberofprocess ]
                do
                   if [ `ps axo cmd | grep  index | grep php | grep -c $i` -lt 1 ] ; then

                   
                   /server/php/bin/php $homedir/index.php $i &
                   
                   fi;
                   
                   i=`expr $i + 1`
                   
        done
       ;;
   stop)
        while [ $currentnumber -ne 0 ]
        do
                kill -9 `ps ax | grep php | grep index | awk {'print $1'} | head -n 1`;

                currentnumber=`ps ax |  grep index | grep -c php`
        done
        
      ;;

  *)
echo "Usage : " $0 "start|stop"
        ;;

esac
exit 0



and it was working fine,

now i'm tring to make it run from a page .


if(isset ($_POST['stop'])){
    $conn->update("update `links` set `proccess`=0 ");
    exec("/home/alin/NetBeansProjects/Fragger2/Trans stop 0");
}


if(isset ($_POST['start'])){
    if(!preg_match("/^[0-9]+$/", $_POST['proccess']))
            echo "proccess should be only a number!";
    
    exec("/home/alin/NetBeansProjects/Fragger2/Trans start ".$_POST['proccess']);
}


and i don't know why it is not working,

i have set for this folder all the permision for this folder  "chmod -R 777 /home/alin"

it doesn't stop running and i can't figure out why

i have to kill the procces from the comand line to stop

I figure I’m doing something basic wrong.
I have this php code.

$cmd = “at $wtime $wdate <<< “sftp -a -r -P xxx xxx@xxx.xxx.net:”.$file.” /mnt/TRFR” ;
exec ($cmd);
echo $cmd;

the “at” command is never generated atq returns blank. But if I copy the output of the echo from the web page into bash the “at” job gets created.

 

What am I missing here?

Edited April 9, 2020 by Henry_Who

Hello, I was just seeing if someone could push me in the right direction. I have a form that uploads items to a database and it also includes uploading images to a directory as a part of that. That all works, but I was thinking for security it'd be best not to leave that directory as 0777 for permissions. In researching this I found the exec() function. I'm still figuring out the relation of who the permissions are associated with and why. All I know is if the directory has 0777 for permissions my script works just fine. I was just seeing if using exec to change the permissions during the process of uploading the images and then change back would be cumbersome and leave open other problems (there won't be any user-based input being passed to that) or if that actually would be the way to go for this.

Thanks!
-Frank