Hello
I am currently building a new site for a customer using ZenCart 1.38a

He has forwarded me an email from his webhost regarding disabling some PHP functions.

> Due to the recent iframe injection attacks ( this exploit allow the hacker to inject certain code to your website and when other users or yourself access the website, the user will be infected by this trojan)on 2 of our servers, we have with immediate effect disabled the following PHP commands : system, passthru, popen, proc_open, shell_exec, exec on all servers until further notice or as when a bug fix is released by cPanel Development Team. Some of you will find that some of your script (especially Gallery) may not be able to work when this is in effect.

Thanks
Danielle

Disabling these 3 are no problem and quite common for good Server security:
system, proc_open, shell_exec

Disabling these will definitely cause problems with many scripts, but not sure about Zen Cart and/or its Modules:
passthru, popen, exec

It's a shame the Hoster in question doesn't just setup good Firewall Rules and avoid all issues with the 'iframe' hack without having to severely limit script features for their Clients.

system, passthru, popen, proc_open, shell_exec, exec

**system **- Not needed by Zen Cart
**passthru **- Not needed by Zen Cart
**popen **- Not needed by Zen Cart unless your Email Transport is "sendmail"
proc_open - Only needed if your Email Transport is "sendmail"
shell_exec - Not needed by Zen Cart, but used by some plugin addons to addons like FCKeditor
**exec **- Used in just a couple places in Zen Cart, but not critical for normal operation. (ie: mainly to collect some info for the Server Info details in admin)

Note:
exec is required by some addons such as the Backup MySQL plugin.

Thanks guys for your replies.

I will look at what email function is being used, and the html editor etc

Thanks again
Danielle

Hi I'm trying to install Zen cart and keep running into various problems.

I'm doing a fresh install on a Linux server with Streamline.net and this is what I get on the system inspection set up screen:

PHP API Mode = cgi-fcgi Click here for more info

PHP Max Execution Time per page = 20

Disabled PHP Functions = shell_exec,exec,system,passthru,popen,proc_open,pass_thru,pcntl_exec,proc_close,proc_get_status,proc_nice,proc_terminate,dl,pclose,pfsockopen,posix_kill,posix_mkfifo

Will this stop me from installing Zen properly? :wacko:

Thanks.

I am doing a community site that will not have a shopping, but I am using many of the zencart parts on "free" host that also disabled many (if not all) PHP function.
Which PHP functions are used to:

1. Create a login account
2. Administer your login account
3. Contact Us page
   because these pages don't load. (they are blank)
   Tx

FAQ on troubleshooting PHP problems causing blank pages: https://www.zen-cart.com/tutorials/index.php?article=82 esp step 2a

http://www.zen-cart.com/forum/showthread.php?t=135448

Englisch Deutsch Übersetzung

VRSLogicUnit:

Hi I'm trying to install Zen cart and keep running into various problems.

I'm doing a fresh install on a Linux server with Streamline.net and this is what I get on the system inspection set up screen:

PHP API Mode = cgi-fcgi Click here for more info

PHP Max Execution Time per page = 20

Disabled PHP Functions = shell_exec,exec,system,passthru,popen,proc_open,pass_thru,pcntl_exec,proc_close,proc_get_status,proc_nice,proc_terminate,dl,pclose,pfsockopen,posix_kill,posix_mkfifo

Will this stop me from installing Zen properly? :wacko:

Thanks.

Even i have the same problem.

Are you also trying to install on Streamline.net? If you are then be aware that you are actually hosting with Fasthosts.

Basic cart functionality will work, but Shared SSL won't (so don't pay for it).

Vger

jhon_lewis:

Even i have the same problem.