How to secure your php.ini

vimkar · 07-09-2005, 12:01 PM

Here are a few tips of how to secure your php.ini !

Edit our php.ini by logging into shell with root :

pico /usr/lib/php.ini

And change the line:

disable_functions =
to:
disable_functions = exec, shell_exec, system, passthru

another thing you could change is

safe_mode = Off
to
safe_mode = On

another thing you could disable is
enable_dl=On
change to
enable_dl=Off

Porte · 07-09-2005, 12:31 PM

I run php on my local pc small server, so thanks for these tips. Just if you could explain to me further about each function, and why it should be changed. Thanks

Peter · 07-09-2005, 03:46 PM

disable_functions stops php from being able to carry out these functions within a script http://uk.php.net/features.safe-mode (about 1/4 of the way down)

changing enable_dl to off stops php from loading any extra modules http://uk2.php.net/dl

enabling safe_mode changes some functionality of php for example when not in safe mode you can edit a file anywhere on the server, when safe_mode is on you can only write to files within a certain tree http://uk.php.net/features.safe-mode

dejaone · 07-11-2005, 12:06 AM

thanks for the useful tips. I just setup my own php.ini on a shared server.

i386 · 07-11-2005, 03:55 AM

If you have a shared server, I assume ini_set() could be used.

Peter · 07-11-2005, 05:31 AM

as long as the host has not disabled the function, if you have htaccess access on your server then some of the options that are pointless changing in your script can be changed in this file.

07-09-2005, 12:01 PM	THREAD STARTER #1 (permalink)
vimkar Senior Member Join Date: Oct 2004 Posts: 1,201	How to secure your php.ini Here are a few tips of how to secure your php.ini ! Edit our php.ini by logging into shell with root : pico /usr/lib/php.ini And change the line: disable_functions = to: disable_functions = exec, shell_exec, system, passthru another thing you could change is safe_mode = Off to safe_mode = On another thing you could disable is enable_dl=On change to enable_dl=Off __________________ Forex Trading Information

07-09-2005, 12:31 PM	#2 (permalink)
Porte Senior Member Join Date: May 2005 Location: I'm right here Posts: 3,526	I run php on my local pc small server, so thanks for these tips. Just if you could explain to me further about each function, and why it should be changed. Thanks __________________ WP Theme Developer Your One-stop for Premium Magazine/CMS WordPress Themes Deluxe Themes

07-11-2005, 12:06 AM	#4 (permalink)
dejaone NamePros Member Join Date: May 2005 Posts: 86	thanks for the useful tips. I just setup my own php.ini on a shared server. __________________ Add to 100 Directories fast and get 50 one-way links Build natural, one-way and permanent links that actually work

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Need HELP with SSL (Secure Certificate)	Gene	Web Design Discussion	11	06-24-2005 09:23 AM
Purchase Verification from Name Secure	taheny	Domain Newbies	6	10-27-2004 10:15 AM
Secure Hosting - $19.95/year Great Budget Hosting	invnet	Web Hosting Offers	0	03-22-2004 10:30 AM
Shopping Cart / Secure CC checkout	kydlynx	Programming	12	07-15-2003 02:23 AM

07-09-2005, 03:46 PM	#3 (permalink)
Peter NamePros Expert Join Date: Nov 2003 Location: Scotland Posts: 5,069	disable_functions stops php from being able to carry out these functions within a script http://uk.php.net/features.safe-mode (about 1/4 of the way down) changing enable_dl to off stops php from loading any extra modules http://uk2.php.net/dl enabling safe_mode changes some functionality of php for example when not in safe mode you can edit a file anywhere on the server, when safe_mode is on you can only write to files within a certain tree http://uk.php.net/features.safe-mode

07-11-2005, 03:55 AM	#5 (permalink)
i386 NamePros Member Join Date: Oct 2003 Posts: 126	If you have a shared server, I assume ini_set() could be used.

07-11-2005, 05:31 AM	#6 (permalink)
Peter NamePros Expert Join Date: Nov 2003 Location: Scotland Posts: 5,069	as long as the host has not disabled the function, if you have htaccess access on your server then some of the options that are pointless changing in your script can be changed in this file.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)