Hello,
As proposed by cmb (thank you !), I open a discussion regarding req #65386 :
https://bugs.php.net/bug.php?id=65386
It summarizes requests around disable_functions directive :
- modification of disable_functions to be a PHP_INI_SYSTEM directive ;
- implementation of enable_functions as a PH
On Thu, Jan 19, 2017 at 6:18 AM, Ben RUBSON wrote:
> As proposed by cmb (thank you !), I open a discussion regarding req #65386 :
> https://bugs.php.net/bug.php?id=65386
>
> It summarizes requests around disable_functions directive :
> - modification of disable_functions to be a PHP_INI_SYSTEM dir
> On 09 Feb 2017, at 18:12, Sara Golemon wrote:
Thank you very much Sara for your feedback !
> On Thu, Jan 19, 2017 at 6:18 AM, Ben RUBSON wrote:
>> As proposed by cmb (thank you !), I open a discussion regarding req #65386 :
>> https://bugs.php.net/bug.php?id=65386
>>
>> It summarizes request
On Fri, Feb 10, 2017 at 4:02 AM, Ben RUBSON wrote:
>> On 09 Feb 2017, at 18:12, Sara Golemon wrote:
>> Could you clarify? `disable_functions` *IS* a PHP_INI_SYSTEM directive:
>>
>> PHP_INI_ENTRY("disable_functions", "", PHP_INI_SYSTEM, NULL)
>
> However, as per all the bugs referenced by #65386,
> On 10 Feb 2017, at 18:25, Sara Golemon wrote:
>
> On Fri, Feb 10, 2017 at 4:02 AM, Ben RUBSON wrote:
>>> On 09 Feb 2017, at 18:12, Sara Golemon wrote:
>>> Could you clarify? `disable_functions` *IS* a PHP_INI_SYSTEM directive:
>>>
>>> PHP_INI_ENTRY("disable_functions", "", PHP_INI_SYSTEM, N
On Fri, Feb 10, 2017 at 4:09 PM, Ben RUBSON wrote:
> I was talking more specifically about the following :
> "php_admin_value disable_functions mydisfunction"
> phpinfo() shows mydisfunction as locally disabled,
> but in reality can still be used.
>
Uh... that sounds like a bug. That should absol
Is there any update on this request?
I can see quite a few security concerns that could be mitigated if we
could enable and disable certain functions at the virtual host level.
nginx paired with php-fpm appears to already work this way. For
consistency purposes, shouldn't this be implemented in
