I have a virtualhost with disable_functions defined as:
<VirtualHost x.x.x.x>
php_admin_value disable_functions system,passthru,exec,popen,proc_close,proc_open,shell_exec
</VirtualHost>
But this PHP code still works:
<html>
<?
$sCMD = `/bin/cat /tmp/test.txt`;
echo $sCMD;
?>
</html>
The contents of test.txt is still read and echoed out. Am I missing something?
I'm running PHP 5.3.16 on Linux 2.4.