Jingga/phpOMS
1
0
Fork 0
mirror of https://github.com/Karaka-Management/phpOMS.git synced 2026-02-05 20:18:42 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix deprecated and disabled function defaults

Browse Source
This commit is contained in:
Dennis Eichhorn 2022-04-04 19:12:41 +02:00
parent 9ae86275ff
commit 8dcc7feaa1
2 changed files with 8 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Module/PackageManager.php
View File

@ -20,6 +20,7 @@ use phpOMS\System\File\Local\LocalStorage;
use phpOMS\System\File\PathException; use phpOMS\System\File\PathException;
use phpOMS\System\OperatingSystem; use phpOMS\System\OperatingSystem;
use phpOMS\System\SystemType; use phpOMS\System\SystemType;
use phpOMS\System\SystemUtils;
use phpOMS\Utils\IO\Zip\Zip; use phpOMS\Utils\IO\Zip\Zip;
use phpOMS\Utils\StringUtils; use phpOMS\Utils\StringUtils;
@ -307,16 +308,7 @@ final class PackageManager
} }
if ($cmd !== '') { if ($cmd !== '') {
$pipes = []; // @todo implement
$resource = \proc_open($cmd, [1 => ['pipe', 'w'], 2 => ['pipe', 'w']], $pipes, $this->extractPath);
foreach ($pipes as $pipe) {
\fclose($pipe);
}
if ($resource !== false) {
\proc_close($resource);
}
} }
} }
} }

12
Security/PhpCode.php
View File

@ -34,12 +34,12 @@ final class PhpCode
* @since 1.0.0 * @since 1.0.0
*/ */
public static array $disabledFunctions = [ public static array $disabledFunctions = [
'apache_child_terminate', 'apache_setenv', 'define_syslog_variables', 'escapeshellarg', 'escapeshellcmd', 'eval', 'apache_child_terminate', 'apache_setenv', 'define_syslog_variables', 'eval',
'exec', 'fp', 'fput', 'ftp_connect', 'ftp_exec', 'ftp_get', 'ftp_login', 'ftp_nb_fput', 'ftp_put', 'ftp_raw', 'exec', 'fp', 'fput', 'ftp_connect', 'ftp_exec', 'ftp_get', 'ftp_login', 'ftp_nb_fput', 'ftp_put', 'ftp_raw',
'ftp_rawlist', 'highlight_file', 'ini_alter', 'ini_get_all', 'ini_restore', 'inject_code', 'mysql_pconnect', 'ftp_rawlist', 'highlight_file', 'ini_alter', 'ini_get_all', 'ini_restore', 'inject_code', 'mysql_pconnect',
'openlog', 'passthru', 'php_uname', 'phpAds_remoteInfo', 'phpAds_XmlRpc', 'phpAds_xmlrpcDecode', 'openlog', 'php_uname', 'phpAds_remoteInfo', 'phpAds_XmlRpc', 'phpAds_xmlrpcDecode',
'phpAds_xmlrpcEncode', 'popen', 'posix_getpwuid', 'posix_kill', 'posix_mkfifo', 'posix_setpgid', 'posix_setsid', 'phpAds_xmlrpcEncode', 'popen', 'posix_getpwuid', 'posix_kill', 'posix_mkfifo', 'posix_setpgid', 'posix_setsid',
'posix_setuid', 'posix_uname', 'proc_close', 'proc_get_status', 'posix_setuid', 'posix_uname', 'proc_close', 'proc_get_status', 'shell_exec',
]; ];
/** /**
@ -49,12 +49,12 @@ final class PhpCode
* @since 1.0.0 * @since 1.0.0
*/ */
public static array $deprecatedFunctions = [ public static array $deprecatedFunctions = [
'apache_child_terminate', 'apache_setenv', 'define_syslog_variables', 'escapeshellarg', 'escapeshellcmd', 'eval', 'apache_child_terminate', 'apache_setenv', 'define_syslog_variables', 'eval',
'exec', 'fp', 'fput', 'ftp_connect', 'ftp_exec', 'ftp_get', 'ftp_login', 'ftp_nb_fput', 'ftp_put', 'ftp_raw', 'exec', 'fp', 'fput', 'ftp_connect', 'ftp_exec', 'ftp_get', 'ftp_login', 'ftp_nb_fput', 'ftp_put', 'ftp_raw',
'ftp_rawlist', 'highlight_file', 'ini_alter', 'ini_get_all', 'ini_restore', 'inject_code', 'mysql_pconnect', 'ftp_rawlist', 'highlight_file', 'ini_alter', 'ini_get_all', 'ini_restore', 'inject_code', 'mysql_pconnect',
'openlog', 'passthru', 'php_uname', 'phpAds_remoteInfo', 'phpAds_XmlRpc', 'phpAds_xmlrpcDecode', 'openlog', 'php_uname', 'phpAds_remoteInfo', 'phpAds_XmlRpc', 'phpAds_xmlrpcDecode',
'phpAds_xmlrpcEncode', 'popen', 'posix_getpwuid', 'posix_kill', 'posix_mkfifo', 'posix_setpgid', 'posix_setsid', 'phpAds_xmlrpcEncode', 'popen', 'posix_getpwuid', 'posix_kill', 'posix_mkfifo', 'posix_setpgid', 'posix_setsid',
'posix_setuid', 'posix_uname', 'proc_close', 'proc_get_status', 'posix_setuid', 'posix_uname', 'proc_close', 'proc_get_status', 'shell_exec',
]; ];
/** /**