Jump to content

Replace Exec Mysqldump With A Pure Php Mysqldump


activa

Recommended Posts

a lot of host and providers disable the exec  functions . like us we disable it even if we use a own vps just for billing .

 

yesterday we have recieved a new plugin of backups done from naja7host for remote cloud backups .

 

and we find that the backup use a native php class for backup rather than the exec function used in bleta core .

 

the class used is located here https://github.com/ifsnop/mysqldump-php .

 

we suggest to add this class in the core or use a semilar class tgo do the backup proccess .

 

 

 

 

Link to comment
Share on other sites

I can't see this happening. We're talking about backing up a database. It's a critical process that should be executed as fast and as efficient as possible.

 

Someone could create a plugin that uses this slow, and not very well written, library if they wanted to avoid using exec commands. But the penalty is not worth the gain in my opinion.

Link to comment
Share on other sites

  • 2 weeks later...

if the script can be exploited someday , you will know why i will disable exec . it's a mesure to minimize he damage IF something happen .

 

If there is a vulnerability, chances are it won't even need exec perms to be exploited. If it's a big concern, you'll want to use an alternative tool to back up your database. R1Soft works very well, and I would highly recommend it. It's also a good idea to run Blesta on a private server.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...