Can anybody explain to me how proc_open() is affected when PHP is running in safe_mode?
As far as i have noticed, the command to execute is appended to a '/' - is there anything else and is it possible to bypass this modification? If i concatenate commands in the shell, i can bypass the forward slash:
[inserted by safe_mode '/'] command ; concatenated_command
this works in the shell, however, its not working when executed using proc_open in safe_mode (php 2.4.17).
Additionally, are there other techniques to bypass safe_mode in php 2.4.17?