php - Wordpress Contact Form 7 hack -
i php procedural guy gets lost in wordpress' complexity , ooo code. trying think simple hack in contact form 7 plugin running on site , not having success.
i trying exec call in 1 of contact form 7's classes:
wp-content/plugins/contact-form-7/includes/classes.php (line 549):
if ( $send ) { exec ("/usr/bin/php /var/www/html/record_subscription_change.php -s $subject -r $recipient -b $body"); return @wp_mail( $recipient, $subject, $body, $headers, $attachments ); }
essentially trying call outside php script , pass variables it. tried creating own function in classes.php
, made contact form 7 unhappy (it spins when hit submit button).
the problem ended being ownership/permissions. wordpress under apache didn't have permission execute script or write log file. once these permissions corrected worked fine.
Comments
Post a Comment