Re: ping22: can not kill this process
2008/1/4, Rick Moen <rick@linuxmafia.com>:
> Quoting Luis Mondesi (lemsx1@gmail.com):
>
> > It's time to tell PHP (via php.ini) not to allow any of those
> > functions that allow executing stuff from the system (system,
> > passthru, whatever).
>
> Amen to that. Good starting point:
> disable_functions = system, exec, passthru, popen, escapeshellcmd, shell_exec
Even better: /usr/share/doc/php5-common/examples/php.ini-paranoid
(it includes some more functions in that definition)
IIRC it includes those and some more. You might want to diff your
php.ini copy to that one to see the different things you could do to
improve your PHP installation.
Regards
Javier
Reply to: