What is the right way to disable PHP Functions?

docenta

Well-Known Member
May 9, 2006
64
0
156
Is it right to be :

system, system_exec, shell, shell_exec, exec, passthru, escapeshellarg, escapeshellcmd, proc_close, proc_open, ini_alter, dl, popen, parse_ini_file, show_source


or :


system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,parse_ini_file,show_source
 

docenta

Well-Known Member
May 9, 2006
64
0
156
TS thanks for the note ;) but is this correct :


disabled_functions = system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,popen,parse_ini_file,show_source,enable_dl,dl


?

What about

allow_url_fopen = Off

register_globals = Off


Thanks.
 

webignition

Well-Known Member
Jan 22, 2005
1,880
0
166
docenta said:
What about

allow_url_fopen = Off

register_globals = Off
What about them?

The comments in your main php.ini file will detail what these parameters are for, what values they can take and what the values mean. The same is explained in the PHP manual.

About what are you unclear?