Trying to Install Pear Package

[sgoodman]

Greetings,

I tried to install the uploadprogress PECL package using the PEAR Package Manager, and I got the following error message:

Warning: popen() has been disabled for security reasons in /var/www/domains/popupsinc.com/docs/mypear/PEAR/PEAR/Builder.php on line 440

So it appears that the popen function failed because it is listed in the disable_functions directive in the configuration file (php.ini).

Is it possible to have the popen function removed from disable_functions... even temporarily?

Thanks,
Shane.

[nickh]

Hi Shane. Unfortunately, popen is disabled because of its potential for abuse. Because of this, allowing its use, even just for a short period of time, is too much of a security risk.

Cheers,
Nick

[sgoodman]

Hi Nick,

Could I temporarily enable popen locally? Maybe using a local php.ini file?

I'm trying to add a progress meter to an upload form. PHP doesn't have this capability, which is why I'm trying to install the uploadprogress package.

Thanks,
Shane.

[nickh]

Hi Shane. Unfortunately, that's not possible. If we allowed users to craft their own php.ini files, they'd have the ability to abuse our servers.

All shell-related commands are disabled for this reason. Eg: shell_exec(), backticks, popen(), passthru(), etc.

[sgoodman]

Nick,

Could someone install the uploadprogress package for me?

Thanks,
Shane.

[nickh]

Hi Shane. I've asked our Operations team if they can install the package. As soon as I hear back, I'll let you know.

Cheers,
Nick

[sgoodman]

Nick,

Thanks for checking. I've been working on this for a long time and it would be great to get it figured out.

Shane.

[nickh]

Hi Shane. I've just finished speaking with our Operations team. Unfortunately, the uploadprogress package won't be installed.

I'm sorry about not being able to install it. However, I recommend giving jQuery Uploader or Yahoo! UI Uploader a whirl.

Have a great weekend!
Nick

[sgoodman]

Nick,

That's disappointing. Do you think you will ever offer PEAR and PECL in the future?

Shane.

[nickh]

I know how disappointing things like this can be, Shane. I've been bitten by them in the past, too.

I'm looking into whether we'll be able to offer PHP PEAR and/or PHP PECL in the near future. As soon as I find out, I'll let you know.

Cheers,
Nick