Bolster Your Site's Defense Disable Functions to Protect Against Vulnerabilities

2、Tips: [disable_functions] is not set in the [php.ini] file to disable dangerous functions such as system, exec, passthru, shell_exec, popen, proc_open, etc. Also what php functions can I add that are missing to improve security? Code: disable_functions = exec,passthru,system,proc_open,popen ... exec,passthru,shell_exec,system,proc_open,popen,show_source should be enough, never had any issues with just these disabled. You should be able ... disable_functions=passthru shell_exec system proc_open popen parse_ini_file show_source These function(s) are disabled. TYPO3 uses some of those, so there ... disable_functions = show_source, system, shell_exec, passthru, exec, popen, proc_open. Some client web scripts may break with some of these ... disable_functions = dl , exec , passthru , pcntl_exec , popen ... shell_exec , system , ftp_exec , leak , posix_setpgid , posix_setsid ... The list of the PHP functions that are added to the disable_functions directive are: exec,system,passthru,shell_exec,proc_close,proc_open,dl ... The directive "disable_functions" allows to disable certain functions. It takes on a comma-delimited list of function names. You can set list of functions in php.ini using disable_functions directive. This directive allows you to disable certain functions for security reasons. disable_functions = system, proc_open, proc_close, popen, passthru ... system, shell_exec, exec, passthru, php_uname, popen, posix_kill ...