Protection against RFI/LFI exploits

Categories: php.ini

To be added in php.ini, was used at Lunarpages:

; Protection agains RFI/LFI exploits
allow_url_fopen = Off
allow_url_include = Off
disable_functions = popen,passthru,escapeshellarg,escapeshellcmd,exec,passthru,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,system,blob,exec,escapeshellarg,pfsockopen,stream_get_transports,stream_set_blocking
«
»