Running batch files from PHP code...

[spoon_]

What's not playing the ball in the code below?

<?php
if(isset($_POST['submit']))
{
echo exec('C:\Run.bat');
echo "Done!";
} else {
// display the form
?>
<form action="" method="post">
<input type="submit" name="submit" value="Run The God Damn Thing!">
</form>
<?php
}
?>

I'm running IIS 5.1 / PHP 5.2.13

Please feel free to assume that my knowledge of PHP is non-existent lol

Any help, much appreciated.

[Flash477]

The \ is an escape character in PHP, so

c:\Run.bat

is actually

c:Run.bat

You want:

c:\\Run.bat

[spoon_]

Good tip but it didn't work...


P.S.

There is only one 'u' in Curiosity so got a little typo there

[Flash477]

Is PHP running in safe mode?

[spoon_]

None of the settings in php.ini indicates that, no.

[Agent]

First off (ripped from PHP.net)

<?php
function exec_enabled() {
  $disabled = explode(', ', ini_get('disable_functions'));
  return !in_array('exec', $disabled);
}
?>

That will allow you to see if exec() is disabled.

Secondly, what OS? If you're running anything recent (Vista, Windows 7, Server 08) then it could be a UAC issue, depending on what the .bat is actually trying to do. Although I would expect a UAC pop-up if this was the case.