[AndrewD]

Originally Posted by ezak

I'm really like your hack very much and I use it for 2 years >> till now
but
for some security reason
I want to disable this two functions (ini_restore,realpath)
and I found that your modification use this 2 function
and thats is the files and lines number

PHP Code:

includes/local_links_images.php:141:        @ini_restore('memory_limit');
includes/local_links_images.php:146:        @ini_restore('memory_limit');
includes/local_links_images.php:158:                @ini_restore('memory_limit');
includes/local_links_images.php:166:                @ini_restore('memory_limit');
includes/local_links_images.php:172:                @ini_restore('memory_limit');
includes/local_links_images.php:178:                @ini_restore('memory_limit');
includes/local_links_images.php:202:            @ini_restore('memory_limit');
includes/local_links_images.php:211:            @ini_restore('memory_limit');
includes/local_links_images.php:250:            @ini_restore('memory_limit');
includes/local_links_images.php:259:            @ini_restore('memory_limit');
includes/local_links_images.php:274:            @ini_restore('memory_limit');
includes/local_links_images.php:279:    @ini_restore('memory_limit');

includes/local_links_include.php:1802:          $ldir = realpath($ldir);
includes/local_links_include.php:1835:                  $return_path = realpath($lpath); 


I want to disable this functions because some shell files use this for hacking
Is that necessary to use this functions or can you use another functions can be safe

I've thought a bit more about this problem. It is not straightforward in the current version of the code to disable realpath() - a number of features will break. In order to modify the code in order to lock down the features that depend on this function, I would need to rewrite a substantial part of the addon. I am willing to include this in the list of things to look into when vbulletin version 4 is released, but I cannot justfy doing this for vb 3.x.