Skip to content

Instantly share code, notes, and snippets.

@mslepko
Created September 15, 2016 23:56
Show Gist options
  • Save mslepko/d7937acd98b81c7036e4af180bbb5c3f to your computer and use it in GitHub Desktop.
Save mslepko/d7937acd98b81c7036e4af180bbb5c3f to your computer and use it in GitHub Desktop.
PHP disable_functions - increasing security
Modify your php.ini file
- Ubuntu/Debian -/etc/php5/apache2/php.ini
- Centos/Rhel - /etc/php.ini
disable_functions = php_uname, getmyuid, getmypid, passthru, leak, listen, diskfreespace, tmpfile, link, ignore_user_abord, shell_exec, dl, set_time_limit, exec, system, highlight_file, source, show_source, fpaththru, virtual, posix_ctermid, posix_getcwd, posix_getegid, posix_geteuid, posix_getgid, posix_getgrgid, posix_getgrnam, posix_getgroups, posix_getlogin, posix_getpgid, posix_getpgrp, posix_getpid, posix, _getppid, posix_getpwnam, posix_getpwuid, posix_getrlimit, posix_getsid, posix_getuid, posix_isatty, posix_kill, posix_mkfifo, posix_setegid, posix_seteuid, posix_setgid, posix_setpgid, posix_setsid, posix_setuid, posix_times, posix_ttyname, posix_uname, proc_open, proc_close, proc_get_status, proc_nice, proc_terminate, phpinfo, apache_child_terminate, apache_setenv, ini_get_all, escapeshellcmd, escapeshellarg
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment