blob: 596036e96ae398f6228ca475d9249ba34e24de66 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
--TEST--
Testing: suhosin.executor.eval.blacklist=printf via call_user_func
--SKIPIF--
<?php include "../skipifnotcli.inc"; ?>
--INI--
suhosin.log.sapi=64
suhosin.executor.disable_eval=0
suhosin.executor.eval.blacklist=printf
--FILE--
<?php
eval('call_user_func("printf", "hello\n");');
?>
--EXPECTF--
ALERT - function within eval blacklist called: printf() (attacker 'REMOTE_ADDR not set', file '%s : eval()'d code', line 1)
Warning: printf() has been disabled for security reasons in %s : eval()'d code on line 1
|
