Protection against Shell Scripts

[bin_asc]

What methods do you use to get protected ? What modules do you using Apache and php to get protected ?
I`m interested because I tried suphp, disable_functions and suexec, nothing works. I can still read for example : /etc/passwd.
Need your suggestions.

 

[Vinayak]

Have you enabled the open base directory protection in WHM.

 

[bin_asc]

You can forget about that, with a normal shell script, that`s very easy to bypass.

 

[cPanelKenneth]

Which functions are you disabling via disable_functions in php.ini?

 

[bin_asc]

exec, system, popen, passthru, shell_exec, proc_open, proc_close, proc_nice, proc_terminate, pclose

 

[cPanelKenneth]

exec, system, popen, passthru, shell_exec, proc_open, proc_close, proc_nice, proc_terminate, pclose

You may wan to add dl. Also check out more of the File System functions. Also, open_basedir can at least be used to lock the PHP functions to a specific directory.

 

[bin_asc]

Well, I did do something, now I can`t browse /home/, but thing is, I can still list /etc/passwd, and I think the only way to stop that is to stop the fopen function which is pretty much out of discussion.

PS. I can list / too.