[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ping22: can not kill this process



2008/1/4, Rick Moen <rick@linuxmafia.com>:
> Quoting Luis Mondesi (lemsx1@gmail.com):
>
> > It's time to tell PHP (via php.ini) not to allow any of those
> > functions that allow executing stuff from the system (system,
> > passthru, whatever).
>
> Amen to that.  Good starting point:
>  disable_functions = system, exec, passthru, popen, escapeshellcmd, shell_exec

Even better: /usr/share/doc/php5-common/examples/php.ini-paranoid
(it includes some more functions in that definition)

IIRC it includes those and some more. You might want to diff your
php.ini copy to that one to see the different things you could do to
improve your PHP installation.

Regards

Javier


Reply to: