Title: Please remove shell_exec, getmyuid from your plugin
Last modified: February 6, 2024

---

# Please remove shell_exec, getmyuid from your plugin

 *  Resolved [markisu72](https://wordpress.org/support/users/markisu72/)
 * (@markisu72)
 * [2 years, 4 months ago](https://wordpress.org/support/topic/please-remove-shell_exec-getmyuid-from-your-plugin/)
 * Hi,
 * can you kindly work around using shell_exec and getmyuid in your plugin?
   Some
   providers (especially those, who take security seriously) have deactivated those
   functions (which I completely support) and actually no other professional plugin
   in the world relies on these functions, due to security reasons.
 * E.g. also some providers being owned by the mother company of your own recommended
   provider (nominalia) have disabled those two functions.
 * Frankly, a plugin related to drop-shipping should not rely on the shop owners
   to take care of system security themselves, even though the physical hardware
   requirements are met.
 * Please, get rid of these security issues.
   This is hampering system security in
   general, if you require them to be active – your plugin is not alone there 😉
 * Thanks
   Markus
    -  This topic was modified 2 years, 4 months ago by [markisu72](https://wordpress.org/support/users/markisu72/).
    -  This topic was modified 2 years, 4 months ago by [markisu72](https://wordpress.org/support/users/markisu72/).

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Thread Starter [markisu72](https://wordpress.org/support/users/markisu72/)
 * (@markisu72)
 * [2 years, 4 months ago](https://wordpress.org/support/topic/please-remove-shell_exec-getmyuid-from-your-plugin/#post-17408482)
 * Hi guys,
 * I checked your code and there are basically only two places, where they are being
   used.
 * Firstly, for checking whether a directory has the same user as the plugin user.
   This is not needed – if there is an issue with accessing the directory, you can
   just _test_ it and post the same message.
   Anyway, this is an absolute corner 
   case and in order to just write a more sophisticated error message, does not 
   rectify using getmyuid.
 * Secondly, you use shell_exec to execute a shell-find-command in order to find
   files. This easily can be done (and every other plugin does that) *without* shell_exec
   and without running shell commands.
 * I thought, it might be more tricky, but it is not – you can easily get rid of
   these functions and thus become compatible with all hosters – especially with
   very security-focusing B2B hosters.
 * Kindly update your plugin, so that these functions are no longer needed and we
   can use dedicated machines, which have been properly hardened for security.
 * Thx
   Markus
 *  Thread Starter [markisu72](https://wordpress.org/support/users/markisu72/)
 * (@markisu72)
 * [2 years, 4 months ago](https://wordpress.org/support/topic/please-remove-shell_exec-getmyuid-from-your-plugin/#post-17422131)
 * Hi [@devsmip](https://wordpress.org/support/users/devsmip/),
   any feedback on 
   this?In general, the plugin seems to work ok, but these restrictions bind me 
   to a provider, I don’t want be bound to (like many others).
 * I’d be glad to support you on getting more positive feedback.
   ThxMarkus
 *  Plugin Author [BigBuy](https://wordpress.org/support/users/devsmip/)
 * (@devsmip)
 * [2 years, 3 months ago](https://wordpress.org/support/topic/please-remove-shell_exec-getmyuid-from-your-plugin/#post-17440045)
 * Dear [@markisu72](https://wordpress.org/support/users/markisu72/)
 * Thank you for your post and your patience.
 * We are working on removing the shell_exec if possible and we are also studying
   the rest of this feedback.
 * We will inform you as soon as possible.
 * Thanks again for all your feedback!
   Best regards,
 * BigBuy Team

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Please remove shell_exec, getmyuid from your plugin’ is closed to new
replies.

 * ![](https://ps.w.org/bigbuy-wc-dropshipping-connector/assets/icon.svg?rev=2187823)
 * [BigBuy Dropshipping Connector for WooCommerce](https://wordpress.org/plugins/bigbuy-wc-dropshipping-connector/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/bigbuy-wc-dropshipping-connector/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/bigbuy-wc-dropshipping-connector/)
 * [Active Topics](https://wordpress.org/support/plugin/bigbuy-wc-dropshipping-connector/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/bigbuy-wc-dropshipping-connector/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/bigbuy-wc-dropshipping-connector/reviews/)

 * 4 replies
 * 2 participants
 * Last reply from: [BigBuy](https://wordpress.org/support/users/devsmip/)
 * Last activity: [2 years, 3 months ago](https://wordpress.org/support/topic/please-remove-shell_exec-getmyuid-from-your-plugin/#post-17440045)
 * Status: resolved