Batonik's [[EMAIL PROTECTED]] 15 lines of wisdom included:
:>Hi,
:>
:> I've heard that it is possible, for security reasons, to disable
:>such functions like phpinfo(). How can I do this?
You can edit the sources...
PHP4: $PHP_BASE_DIR/ext/standard/basic_functions.c
You're looking for a struct called
function_entry basic_functions[]
On my version (4.0.4-pl1) it's on line 91.
Your functions are listed there..
for example, delete line "PHP_FE(time, NULL)"
which is on line 100 on my version disables the time function.
However, why you want to disable functions is beyond me, to make PHP
"safe" you're going to have to disable a LOT of functions..
There might be some PHP4 way to disable functions, I think there
might be some way to do it from php.ini, but I can't find it
offhand.
Phil.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
