[imp] escapeshellcmd() and popen() really needed?

[Chuck Hagenbuch]

Quoting BiBe <bibe2001 at gmx.de>:

> i've confgigured safe_mode off in apache-webserver and alternatively using
> open_basedir to restrict each user to his www-directory. To avoid him braking
> out of his basedir, i've disabled a few shell-functions including
> escapeshellcmd() and popen() which are apparently used by IMP to compose and
> send mails.
> Is it possible to configure IMP not using these shell-functions?

You should _not_ disable escapeshellcmd. It is just an escaping  
function. You can probably get by without popen if you configure an  
SMTP server instead of using a local sendmail binary, and if you don't  
use an external spell checker (either no spell checker, or the pspell  
extension).

-chuck

-- 
"we are plastered to the windshield of the bus that is time." - Chris