Sunday, June 29, 2008

Securing php.ini

The following values can be used on servers that have cronic php hacking issues:

disable_functions = "system,exec,shell_exec"

OR -if that doesn't work -

disable_functions = "system,exec,shell_exec,passthru,readfile,escapeshellarg,escapeshellcmd,popen,pcntl_exec"

No comments: