05-20-2009, 04:50 PM
Pages: 1 2
05-20-2009, 06:23 PM
it is totally possible, just difficult.
05-25-2009, 12:50 PM
Yes. But tbh, I added a few shell_exec commands so its not really appropriate. To create and to get the files, etc. Like:
I'm not sure how was the code (shell_exec_safe is used to execute shell commands safely, without the rm-rf * or these dangerous commands. But the UMI's API is not that vulnerable, its just a percaution)
So its possible, but difficult, and probably unsafe. Who knows, one day someone will write it up again
PHP Code:
$cmds = "";
$xml = $umi->xmlParse("<file>", "php");
for($i=0;$i<count($xml);$i++){
$cmds .= $xml[$i];
}
$umi->shell_exec_safe("cd ".$umi->tht_root_dir." && ".$cmds);
So its possible, but difficult, and probably unsafe. Who knows, one day someone will write it up again

05-26-2009, 11:55 AM
i had a shell exec in one of the plugins I showed Jonny a while ago. I never did find out if he decided to use it.
Pages: 1 2