php: escapeshellcmd() has been disabled for security reasons

Any help on this would be appreciated – still not getting the database backed up.

• This reply was modified 7 years, 1 month ago by prcd.

Hey there –

Sorry for the delay in getting in touch with you. Generally we can work around having to use the exec function if the backup option is available. Can you check and see which options are/aren’t available on your host:

• MySQLDump
• php version of above, loaded by our plugin but sometimes unable to run because of server limitations
• Zip Command
• ZipArchive – a php zip function, also included in our plugin

ps – it looks like the associated function is the escapeshellcmd one that is causing issues. Again, though, the backup option should be working around this. I’m checking the code again until I hear back from you.

Thanks,
Kat

• This reply was modified 7 years ago by Katrina "Kat" Moody.

Hi Kat

I’ve been told by our host that the exec() function is disabled.

Not too sure what you mean – which MySQLDump option is available, or the Zip Command – are these PHP functions, shell commands?

The ZipArchive class is available.

Thanks

Steve

Hey there –

The exec function would tie into the escapeshellcmd error you’re getting.

As for the other question – the commands and functions are broken apart by whether they affect the database or files part of the process.

The Database —
The MySQLDump Command is installed on the server-side, while if that isn’t available we have a php-powered version of that (called iMySQLDump) that will try to run, as long as the admin user is allowed to run commands inside the backup directory.

The Files —
Same for the Zip Command (in that it’s installed on the server side and there is a php-powered alternate called ZipArchive that the backup will fall back to using), but that is only available on non-Windows servers.

Your host should be able to tell you which are or aren’t available.

Thanks and best of luck to you!
Kat

Also – what version of the plugin are you using? Is it the most recent? Because we switched from using the exec function a few versions back and switched to using proc_open instead.

Let me know?

Using version 3.6.4, installed a couple of weeks ago in WordPress admin.

Check with your host to see if they’ve blocked the use of the proc_open function and if so, whether they can re-enable it for you.

Kat

Hi Kat

proc_open is enabled.

Thanks

Steve

May i join this thread? I have the same issue and, after reading your advice, I asked our web host to enable the service and they responded that proc_open and escapshellarg are closed for security reasons. Do I have any other options? I’ve used backupwordpress for years and hate to switch away from it. Please advise. I can still survive by downloading database via cPanel, but I prefer not. I appreciate any advise you may offer. Thank you.
david

I have a problem getting the backup plugin to run since I had to update to https. Since I am behind a reverse poroxy, it proved to be a challenge. Anyway, what I did was to write my own backup program and have it run from cron. It took about 20 minutes to implement. I get full backups of the database and all the files.

Of all the wordpress backup plugins available, this one is the best, but it just won’t run in my situation unless some code changes are made. I am not willing to go through that grief.

I suggest that if you are hosted on a linux platform, write your own backup solution.

If you need a copy of my script, let me know and I will post it. At least you will have a backup until your issues are sorted out.

rich

I appreciate your offer and admire that you can do that, but I have several sites using backupwordpress and I am hoping for an official response. I did locate another plugin that works, but nothing is as good as backupwordpress so I remain hopeful. Again, it was thoughtful of you to make this offer.
david

I am surprised that you found something that meets your needs. I tried several and gave up.

You are welcome.

It’s called Duplicator and produces a similar output to Backupwordpress. Available at https://www.ads-software.com/plugins/duplicator/ if you cannot use backupwordpress, it’s a workable alternative – but I’m hoping for a response from developer, hoping there is a solution for me.