Dangerous PHP Functions Enabled

[Denetor]

Dangerous PHP Functions Enabled

We recommend disabling the following functions on your server, or at least in the directory that your community is installed in. If you do not manage your server yourself, your hosting provider will be able to assist with this.
exec, system, popen, proc_open, shell_exec

 

 

 

Hi all, just wondering how does these issues can be fixed?, i contacted to the host tech support but that warning is still there in the dashboard.

Edited August 1, 2018 by Denetor

[antarsis]

You would need to modify your php.ini file and add this line.

disable_functions = "exec, system, popen, proc_open, shell_exec"

[Denetor]

11 hours ago, antarsis said:

You would need to modify your php.ini file and add this line.

disable_functions = "exec, system, popen, proc_open, shell_exec"

 

Thanks for your response :)

already did it but it doesn't seems to work the file is in the directory where the community is installed in.

[antarsis]

4 hours ago, Denetor said:

 

Thanks for your response :)

already did it but it doesn't seems to work the file is in the directory where the community is installed in.

It should be in the directory /etc/php/php(version)/

You need a root ssh access but...

[Caseir]

I am also seeing this warning after upgrading to 4.3 (from 4.2) - but have checked (own managed server with root access) and those php functions are actually NOT enabled (nor are "display_errors").

Wondering if it could be false-positive caused by non-standard location of php.ini files? (ie. using ServerPilot)

[Cookie Monster]

23 minutes ago, Caseir said:

I am also seeing this warning after upgrading to 4.3 (from 4.2) - but have checked (own managed server with root access) and those php functions are actually NOT enabled (nor are "display_errors").



Wondering if it could be false-positive caused by non-standard location of php.ini files? (ie. using ServerPilot)

Did you check the global php.ini for the server or possible your site specific php.ini  

[killshandra]

those functions are not available on shared hosting or on some  shared cloud system, the only way to not have that kind of alert its having in most case  a private server or something where you can manage yourself your phph functions, and shared hosting will not change this functions for you 

Edited August 3, 2018 by killshandra

[L.Coroa]

On 01/08/2018 at 12:34, Denetor said:

Funções Perigosas do PHP Habilitadas

Recomendamos desabilitar as seguintes funções em seu servidor ou, pelo menos, no diretório em que sua comunidade está instalada. Se você não gerencia seu servidor sozinho, seu provedor de hospedagem poderá ajudá-lo.
exec, system, popen, proc_open, shell_exec

 

 

 

Oi tudo, só querendo saber como esses problemas podem ser corrigidos ?, eu entrei em contato com o suporte técnico do host, mas esse aviso ainda está lá no painel.

 

Friend this is happening in the general forum in my and my clients'

[killshandra]

are you self hosting or on a hosting ?

[Denetor]

ok, i tried everything that was suggested here (thanks alot) but i can not get rid of this warning, my hosting is not a shared service (from what i know) so i don't know what else i can do .

[Denetor]

ok, after making a revision i finally got rid of this warning message by adding the said command line into the cp console in the php settings and fixing the line adding athe [ ] signs.

 

Thanks alot to everyone for your assistance

[killshandra]

The question(s) in this support topic have been answered and the topic author has resolved their issue. This topic is now closed. If you have other questions, please open a new topic.