shell_exec should not be used in the code it is present in class_ldap.inc
Hello,
FusionDirectory should not exec command from the shell, so this code should be removed and reworked without shell access if necessary
./include/class_ldap.inc: // First check if we are able to call 'ldapsearch' on the command line.
./include/class_ldap.inc: $check = shell_exec('which ldapsearch');
./include/class_ldap.inc: $this->error = sprintf(_("Missing command line programm '%s'!"), 'ldapsearch');
./include/class_ldap.inc: cmd = "ldapsearch -x -LLLL -D {
admin} {filter} {
limit} {scope} -H {
host} -b {dn} -w {
pwd} ";
(from redmine: issue id 2784, created on 2013-10-09, closed on 2014-03-17)
- Changesets:
- Revision 7862e631 by Côme Chilliet on 2013-11-12T08:44:45.000Z:
Fixes: #2784 Removed shell_exec call from class_ldap.inc
- Revision bc1c1aef by Côme Chilliet on 2013-11-19T16:23:10.000Z:
Fixes: #2784 Removed shell_exec call from class_ldap.inc
- Custom Fields:
- Bug in version: 1.0.7
- Uploads: