Updated recommended PHP settings

Home Forums BulletProof Security Free Updated recommended PHP settings

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
  • #43443


    I looked at the PHP recommended settings today and found the page(s) to be rather outdated. I’ve found, at least at one host, that the “disable functions” setting is not present. So I’m wondering if you have updated recommended settings for PHP 8.x since the available options don’t seem to be the same.

    AITpro Admin

    I saw some conflicting information in Google searches about the disable_functions php.ini directive.  A couple people said that the disable_functions php.ini directive no longer works in PHP 8.  That is incorrect.  I just did some testing on a server with PHP 8.2.12 on it and the disable_functions php.ini directive still works.

    You would add this directive in either a php.ini file or a .user.ini file in the root directory of your hosting account. These php functions below should be disabled.

    disable_functions=system, exec, passthru, shell_exec, show_source, popen, pclose

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.