Browse Source

[PHP-FPM] Disable some functions by default

André 7 years ago
parent
commit
abd0a1b337
1 changed files with 2 additions and 0 deletions
  1. 2 0
      data/conf/phpfpm/php-fpm.d/pools.conf

+ 2 - 0
data/conf/phpfpm/php-fpm.d/pools.conf

@@ -11,6 +11,7 @@ access.log = /proc/self/fd/2
 clear_env = no
 clear_env = no
 catch_workers_output = yes
 catch_workers_output = yes
 php_admin_value[memory_limit] = 256M
 php_admin_value[memory_limit] = 256M
+php_admin_value[disable_functions] = show_source, highlight_file, apache_child_terminate, apache_get_modules, apache_note, apache_setenv, virtual, dl, disk_total_space, posix_getpwnam, posix_getpwuid, posix_mkfifo, posix_mknod, posix_setpgid, posix_setsid, posix_setuid, posix_uname, proc_nice, openlog, syslog, pfsockopen, system, shell_exec, passthru, popen, proc_open, exec
 
 
 [web-worker]
 [web-worker]
 user = www-data
 user = www-data
@@ -25,3 +26,4 @@ access.log = /proc/self/fd/2
 clear_env = no
 clear_env = no
 catch_workers_output = yes
 catch_workers_output = yes
 php_admin_value[memory_limit] = 512M
 php_admin_value[memory_limit] = 512M
+php_admin_value[disable_functions] = show_source, highlight_file, apache_child_terminate, apache_get_modules, apache_note, apache_setenv, virtual, dl, disk_total_space, posix_getpwnam, posix_getpwuid, posix_mkfifo, posix_mknod, posix_setpgid, posix_setsid, posix_setuid, posix_uname, proc_nice, openlog, syslog, pfsockopen, system, shell_exec, passthru, popen, proc_open, exec