PHP: Bypass disable_function

Ohm J

Verified User
Joined
Aug 16, 2019
Messages
1,467
I have just found how to connect ssh, or anyelse port with
" fsockopen | socket_create | pfsocketopen " or something else with do samething

Code:
 $nofuncs='no exec functions';
    if(is_callable('fsockopen')and!in_array('fsockopen',$dis)){
      $s=@fsockopen("tcp://127.0.0.1",$port);
      while($c=fread($s,2048)){
     ...SNIP...
}else{
      $s=@socket_create(AF_INET,SOCK_STREAM,SOL_TCP);
      @socket_connect($s,$ipaddr,$port);
      @socket_write($s,"socket_create");
     ...SNIP...

with coding something like this, Hacker can bruteforce to your server or just use your server to attacker other server,

Can I safe to disable these 3 function and not do malfunction to other ?
I just disable for my client.
 
Last edited:
Back
Top