Last modified: 2010-05-15 15:38:32 UTC
includes/Image.php uses the shell_exec -function resize images, which doesn't
work if safe-mode is on. I replaced this with exec, and resizing images started
to work. (convert -command is in safe_mode_exec_dir)
We've explored this kind of thing before. The problem is just that safe_mode is inherently broken; exec()'s behavior is
different under safe_mode and becomes very unreliable:
"With safe mode enabled, the command string is escaped with escapeshellcmd(). Thus, echo y | echo x becomes echo y
\| echo x."
This will of course bork up the properly-escaped shell commands, so various filenames would stop working.
PHP 6 is removing the broken safe_mode option, so keep in mind it's unsupported.
*** Bug 6298 has been marked as a duplicate of this bug. ***