[GH-ISSUE #2017] Malware scanner flagging shell_exec calls #864

New issue

Closed

opened 2026-03-04 03:01:42 +03:00 by kerem · 2 comments

kerem commented

2026-03-04 03:01:42 +03:00

Owner

Originally created by @mark-c-woodard on GitHub (Jan 9, 2026).
Original GitHub issue: https://github.com/Seldaek/monolog/issues/2017

Monolog version 2.11.0

Hello,
I saw that you added some shell_exec commands as part of the 2.11.0 release, this commit specifically github.com/Seldaek/monolog@e01926b069

I didn't see the commit related to any particular issue so I wanted to ask if those calls were necessary and potentially ask if you could replace them.
I got a bug report from one of my users saying that the calls are being flagged by a malware scanner.

https://wordpress.org/support/topic/version-3-5-30-has-calls-to-shell_exec/

Thank you,
Mark

Originally created by @mark-c-woodard on GitHub (Jan 9, 2026). Original GitHub issue: https://github.com/Seldaek/monolog/issues/2017 Monolog version 2.11.0 Hello, I saw that you added some shell_exec commands as part of the 2.11.0 release, this commit specifically https://github.com/Seldaek/monolog/commit/e01926b069b331b13708b1c1b3669d871ea93e6b I didn't see the commit related to any particular issue so I wanted to ask if those calls were necessary and potentially ask if you could replace them. I got a bug report from one of my users saying that the calls are being flagged by a malware scanner. https://wordpress.org/support/topic/version-3-5-30-has-calls-to-shell_exec/ Thank you, Mark

kerem

2026-03-04 03:01:42 +03:00

closed this issue
added the
Bug
label

kerem commented

2026-03-04 03:01:44 +03:00

Author

Owner

@stof commented on GitHub (Jan 9, 2026):

The backtick notation in PHP was already doing shell exec (with a notation that is now deprecated in PHP).

If the malware scanner tools rejects one of them but not the other one, it is a bad tool anyway.

@stof commented on GitHub (Jan 9, 2026): The backtick notation in PHP was **already** doing shell exec (with a notation that is now deprecated in PHP). If the malware scanner tools rejects one of them but not the other one, it is a bad tool anyway.

kerem commented

2026-03-04 03:01:44 +03:00

Author

Owner

@mark-c-woodard commented on GitHub (Jan 9, 2026):

aha, thanks for the explanation. I should have realized that myself.

@mark-c-woodard commented on GitHub (Jan 9, 2026): aha, thanks for the explanation. I should have realized that myself.

kerem referenced this issue

2026-03-04 03:11:39 +03:00

[PR #865] [CLOSED] Don't call to close in FingersCrossedHandler and GroupHandler of their handlers #1386