Quote:
Originally Posted by ezak
I'm really like your hack very much and I use it for 2 years >> till now
but
for some security reason
I want to disable this two functions (ini_restore,realpath)
and I found that your modification use this 2 function
and thats is the files and lines number
PHP Code:
includes/local_links_images.php:141: @ini_restore('memory_limit');
includes/local_links_images.php:146: @ini_restore('memory_limit');
includes/local_links_images.php:158: @ini_restore('memory_limit');
includes/local_links_images.php:166: @ini_restore('memory_limit');
includes/local_links_images.php:172: @ini_restore('memory_limit');
includes/local_links_images.php:178: @ini_restore('memory_limit');
includes/local_links_images.php:202: @ini_restore('memory_limit');
includes/local_links_images.php:211: @ini_restore('memory_limit');
includes/local_links_images.php:250: @ini_restore('memory_limit');
includes/local_links_images.php:259: @ini_restore('memory_limit');
includes/local_links_images.php:274: @ini_restore('memory_limit');
includes/local_links_images.php:279: @ini_restore('memory_limit');
includes/local_links_include.php:1802: $ldir = realpath($ldir);
includes/local_links_include.php:1835: $return_path = realpath($lpath);
I want to disable this functions because some shell files use this for hacking
Is that necessary to use this functions or can you use another functions can be safe
|
The calls to ini_restore() can be commented out without difficulty. LDM tries to claim extra memory when producing image thumbnails because this can be a very memory intensive task wih high resolution pictures. The function call is used to return that memory, but it will get returned in any case when the script completes.
The call to realpath() is more difficult, and I will have to investigate if there is a realistic alternative.