Disabled Function Dl()

[crippen]

I am running an installation wizard for x-cart shopping cart software. I've gone through the pre-setup configurations and believe I should be all set, however a check that the software does before actually installing gives me the following error:

 

Checking results

Critical dependencies Status

PHP Version (min 4.0.6 required) ... 4.4.1 - [OK]PHP Safe mode is ... Off - [OK]

Disabled functions list ... dl - [FAILED]

File uploads is ... On - [OK]

MySQL support is ... On - [OK]

Register long arrays is ... On - [OK]

 

Non critical dependencies Status

Maximum file size for upload is ... 2M - [OK]

 

So it appears that dl() is a disabled function, and I may have problems with using x-cart on TCH as a result. I'm wondering if anyone has come across this before, and would suggest a way I can get around this? I'm guessing that the disabling of the function cannot be over-ridden within my local files somehow?

 

I found the following page in the php manual:

http://us2.php.net/dl

 

But I'm not enough of a php expert to really understand what this means and what I can possible do about the issue.

 

I've also contacted x-cart as well for suggestions. Thought I would ask here as well. I hope I don't have to leave TCH because of this.

[TCH-Rob]

Did you happen to read the third note in the link you provided?

 

There is an exploit circulating currently which takes advantage of dl() to inject code into Apache which causes all requests to all virtual hosts to be redirected to a page of the attackers choice.

 

All operators of shared web hosting servers with Apache and PHP should disable dl() by setting enable_dl to off otherwise your servers are vulnerable to this exploit.

 

I do not know if this is still an issue as it was posted six months ago and may not apply anymore. You might want to open a ticket and see if you can get an answer as to why it is disabled or if it can be enabled.

[crippen]

Thanks Rob, I did see that. The thing is, when I run a phpinfo() on my account, I get the following returned:

 

Configuration

PHP Core

Directive Local Value Master Value

...

 

disable_functions dl dl

...

 

enable_dl On On

 

So, it would seem that enable_dl is actually on here despite the warning someone posted about.

 

I'm going to see what x-cart has to say, and I'm hoping there will be some type of patch or update they can provide.

[crippen]

I'll try posting a ticket here as well in case something can be done on the TCH end.

[TCH-Rob]

Let me know what you find. I know we have other users here running X-Cart.