[dokuwiki] Re: Problem.. disable_functions

  • From: Myron Turner <turnermm02@xxxxxxx>
  • To: dokuwiki@xxxxxxxxxxxxx
  • Date: Sun, 26 Aug 2007 21:05:24 -0500

Fabio Silva wrote:
Hi all, i have a big problem... i have dokuwiki in my personal
website, but, i discovered that the server has a php.ini configuration
that the function disable_function is active, and when i try to access
my dokuwiki site, i have a file in lib/exe/error_log , this file has
the following

[26-Aug-2007 21:15:09] PHP Warning:  readfile() has been disabled for
security reasons in /home/user/public_html/wiki/lib/exe/css.php on
line 86
[26-Aug-2007 21:15:10] PHP Warning:  readfile() has been disabled for
security reasons in /home/user/public_html/wiki/lib/exe/css.php on
line 86
[26-Aug-2007 21:15:10] PHP Warning:  readfile() has been disabled for
security reasons in /home/user/public_html/wiki/lib/exe/js.php on line
69


in phpinfo () i can see that the disable_function is enable, and i
think that its my problem.

Is there any way to put dokuwiki work with this server??


Regards,
This can only be changed in php.ini.
See: http://ca.php.net/manual/en/features.safe-mode.php#ini.disable-functions

There is a bug in php 4 that can lead to a Denial of Service attach through readfile:
See: http://xforce.iss.net/xforce/xfdb/19534

The readfile() function opens a file, reads it, and outputs its contents. But since readfile() occurs only in a few places in the source code, you could probably substitute file() or file_get_contents() and output the file contents yourself.

$contents = file_get_contents();
echo $contents;



--

_____________________
Myron Turner
http://www.room535.org
http://www.bstatzero.org
http://www.mturner.org/XML_PullParser/

--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Other related posts: