PHP Disable function

elcapitanph

hello what is you normal setting for php disable_function
"
system, exec, shell_exec, passthru, phpinfo, show_source, popen, proc_open, fopen_with_path, dbmopen, dbase_open, putenv, move_uploaded_file, chdir, mkdir, rmdir, chmod, rename, filepro, filepro_rowcount, filepro_retrieve, posix_mkfifo
"
?

DracoBlue

It depends. On one page I have it set like this (required by the forum engine)
disable_functions=exec,system,passthru,pcntl_exec,popen,proc_open,shell_exec

elcapitanph

I see thank you so much for your feedback

JohnB

Worth mentioning that each site is containerized so there isn't a security risk in allowing these functions.

Zoinkies

Also worth mentioning, disabling php functions can affect Enhance, i.e. backups etc, I have run into issues disabling some functions that are in use by Enhance itself.

JohnB

Also worth mentioning what Zoinkies said was worth mentioning.

Not even sure why you would want to disable functions when they will be in a container anyway. Doesn't affect site security or even performance because of cgroup limits.