No Code Attached Yet
avatar gwstyles
gwstyles
14 Dec 2021

Steps to reproduce the issue

Install some extensions compatible with j4.

Expected result

They work

Actual result

0 Call to undefined function PHPMailer\PHPMailer\escapeshellcmd()

System information (as much as possible)

J 4.0.4
PHP 8.0.13

Additional comments

A little bit of history. I have been testing J4 since beta,I have discovered a few extensions that cause this error. The first was easycontact from les arbres who worked through the weekend to fix it,the second was RS forms pro who fixed it after a couple of days.I now have a booking extension that is doing the same (I wont name them)and they say I have to have these php extensions enabled on the server for it all to work because this is the way joomla does (I don't think so). I have a few J4 sites that do not need these ext to be enabled on the server and all work fine.This is what their devs say ; Hello,

it's true, we use the setSender() native Joomla function, but the PHP function that was missing (before you enabled it) was called by Joomla itself. Those are PHP functions which are enabled within any web server (both Joomla and WordPress use the same exact PHP functions to send emails), so there's nothing much that either you, or us, can do to avoid using them, otherwise you should disable the mailing functionalities within any Joomla or Wordpress plugin.
I don't think this is correct but do not have sufficient knowledge to argue the point.I have been told by friends that enabling these php exts are a possible security risk??
Would somebody who knows tell me what is correct and what is not.Thanks gws.

avatar gwstyles gwstyles - open - 14 Dec 2021
avatar gwstyles gwstyles - change - 14 Dec 2021
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 14 Dec 2021
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 14 Dec 2021
avatar brianteeman
brianteeman - comment - 14 Dec 2021

Look at the PHP web site to see what these functions are and why they exist.

Hint: never trust a friend

avatar gwstyles
gwstyles - comment - 14 Dec 2021

@brian, thanks for your reply, I did look at the php site to understand what they do,it appears to me they are used to sanitise imputed code/url etc.Further searching suggested they were ineffective and possibly open to abuse. All this is above my head.The question is does J4 require this or not? Thanks gws.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/36307.

avatar brianteeman
brianteeman - comment - 14 Dec 2021

if you are using anythign that uses phpmail then they are needed. If you use smtp then they are not

avatar gwstyles
gwstyles - comment - 14 Dec 2021

Thanks.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/36307.

avatar richard67
richard67 - comment - 14 Dec 2021

@gwstyles Is your question answered and you (or we) can close this issue?

avatar gwstyles
gwstyles - comment - 14 Dec 2021

Good day Richard, I don't know how to close it,new to this board.Please close for me.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/36307.

avatar richard67 richard67 - change - 14 Dec 2021
Status New Closed
Closed_Date 0000-00-00 00:00:00 2021-12-14 14:58:58
Closed_By richard67
avatar richard67 richard67 - close - 14 Dec 2021
avatar richard67
richard67 - comment - 14 Dec 2021

Closing as agreed above.

Add a Comment

Login with GitHub to post a comment