Execute PHP in shell from PHP script executed through web

[Yannick Vallo Wållgren]

Hi all

 

I have this problem on a server using php5, unix based, safe_mode is On globally, i have turned it off locally through php.ini.

 

Ok, this is testing example script i used:

$cmd = ( "php -v" );
$out = shell_exec( $cmd );
print $out;

On my own server this returns php version. On this mentioned server i'm using (commercial) this causes complete server breakdown, when logged in with SSH, i can't even issue "ls" command after that, nor find and kill the process.

What could be so wrong with it? I don't think calling php-cli would make any difference.