Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • fusiondirectory fusiondirectory
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 33
    • Issues 33
    • List
    • Boards
    • Service Desk
    • Milestones
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Terraform modules
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • fusiondirectoryfusiondirectory
  • fusiondirectoryfusiondirectory
  • Issues
  • #2784
Closed
Open
Issue created Oct 09, 2013 by bmortier@bmortierMaintainer

shell_exec should not be used in the code it is present in class_ldap.inc

Hello,

FusionDirectory should not exec command from the shell, so this code should be removed and reworked without shell access if necessary

./include/class_ldap.inc: // First check if we are able to call 'ldapsearch' on the command line. ./include/class_ldap.inc: $check = shell_exec('which ldapsearch'); ./include/class_ldap.inc: $this->error = sprintf(_("Missing command line programm '%s'!"), 'ldapsearch'); ./include/class_ldap.inc: cmd = "ldapsearch -x -LLLL -D {admin} {filter} {limit} {scope} -H {host} -b {dn} -w {pwd} ";

(from redmine: issue id 2784, created on 2013-10-09, closed on 2014-03-17)

  • Changesets:
    • Revision 7862e631 by Côme Chilliet on 2013-11-12T08:44:45.000Z:
Fixes: #2784 Removed shell_exec call from class_ldap.inc
  • Revision bc1c1aef by Côme Chilliet on 2013-11-19T16:23:10.000Z:
Fixes: #2784 Removed shell_exec call from class_ldap.inc
  • Custom Fields:
    • Bug in version: 1.0.7
  • Uploads:
    • 0001-Fixes-2784-Removed-shell_exec-call-from-class_ldap.i.patch
Assignee
Assign to
Time tracking