How to secure your php.ini

[vimkar]

Here are a few tips of how to secure your php.ini !

Edit our php.ini by logging into shell with root :

pico /usr/lib/php.ini

And change the line:

disable_functions =
to:
disable_functions = exec, shell_exec, system, passthru

another thing you could change is

safe_mode = Off
to
safe_mode = On


another thing you could disable is
enable_dl=On
change to
enable_dl=Off

 

[Porte]

I run php on my local pc small server, so thanks for these tips. Just if you could explain to me further about each function, and why it should be changed. Thanks

 

[Peter]

disable_functions stops php from being able to carry out these functions within a script http://uk.php.net/features.safe-mode (about 1/4 of the way down)

changing enable_dl to off stops php from loading any extra modules http://uk2.php.net/dl

enabling safe_mode changes some functionality of php for example when not in safe mode you can edit a file anywhere on the server, when safe_mode is on you can only write to files within a certain tree http://uk.php.net/features.safe-mode

 

[dejaone]

thanks for the useful tips. I just setup my own php.ini on a shared server.

 

[i386]

If you have a shared server, I assume ini_set() could be used.

 

[Peter]

as long as the host has not disabled the function, if you have htaccess access on your server then some of the options that are pointless changing in your script can be changed in this file.