What is the right way to disable PHP Functions?

[docenta]

Is it right to be :

system, system_exec, shell, shell_exec, exec, passthru, escapeshellarg, escapeshellcmd, proc_close, proc_open, ini_alter, dl, popen, parse_ini_file, show_source


or :


system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,parse_ini_file,show_source

 

[brianoz]

What does the PHP manual say?

Have you checked the syntax in your existing php.ini file?

 

[tweakservers]

looks like your questions has been answered at WHT : :D

http://www.webhostingtalk.com/showthread.php?t=523742

 

[docenta]

TS thanks for the note but is this correct :


disabled_functions = system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,popen,parse_ini_file,show_source,enable_dl,dl


?

What about

allow_url_fopen = Off

register_globals = Off


Thanks.

 

[webignition]

What about

allow_url_fopen = Off

register_globals = Off

What about them?

The comments in your main php.ini file will detail what these parameters are for, what values they can take and what the values mean. The same is explained in the PHP manual.

About what are you unclear?

 

[docenta]

is not the allow_url_fopen important function for most of PHP coders ?