viper-7/deployable-php-codepad

Web Application (still alpha!) using Gearman, Jailkit and SilverStripe CMS

deployable-php-codepad's Issues

Sorry dude, I think I DoS'd your codepad...

I was just playing around with shell_exec (no bad intent, just looking around, looked pretty safe actually, I was impressed). Then I got the bright idea to do the following:

while true; do cat /dev/zero > /dev/null; done

I didn't think that would work but... well.. I couldn't access the site for like 10 minutes. So I'm just telling you here because it's probably something you could fix pretty easy, and it can cause a lot of annoyance (sorry again).

Hi

Line#13
https://github.com/Viper-7/Deployable-PHP-Codepad/blob/master/manager/lib/PHP_Jailer.php

bash command in worker.php

Line #26

https://github.com/Viper-7/Deployable-PHP-Codepad/blob/master/worker/worker.php

$limits = "/bin/bash -c ulimit -c 1024000 -e 19 -f 10 -t 20 -u 10 -x 5; timelimit -T 1 -t 15 ";

shouldnt this be :

$limits = "/bin/bash -c 'ulimit -c 1024000 -e 19 -f 10 -t 20 -u 10 -x 5'; timelimit -T 1 -t 15 ";

??

Error at /Paste

It appears you dun goofed at /Paste when the request is using GET.

Documentation

Hey Viper 7,

I'm really interested in this project, but there is no documentation. I'm totally lost on the code and the bash scripts don't work on Windows or all environments.

Can you make this code more accessible. I want to integrate this into a big project. I'm willing to contract out some work too.

Shows rendered html instead of html code in result view

The screenshot is self-explanatory.

You should see "

Hi

" where you see "Hi".

Create Account

Good day,
I created an account, the system said an e-mail verification would be sent out. That was a 3-4 days ago and nothing has been sent. Can you please assist?

Thank you,

derrick

Project is unsafe - bad code paste can crash server

I was testing the codepad on viper-7 and inadvertently locked up the web server when seeing what it was capable of (your readme mentions "And the other, "Worker", which runs inside the jail as the jailexec user, and executes pastes via a mock CGI interface, where security is no problem, and so where the entire request/response transaction, shell environment, php extensions, and even custom php.ini's are all fair game ") via a code snippet similar to the following (in my snippet I was trying to test how your codepad handled fork recursion - apparently it doesn't).

To reproduce, run something similar to this in a paste: