A.2. disable_functionsThe disable_functions directive is useful for ensuring that potentially dangerous functions cannot be used. Although guidelines can be established to prohibit the use of such functions, enforcing such restrictions in the configuration of PHP is much more reliable than depending on developers to adhere to guidelines. I recommend reviewing the functions listed in Appendix B to see if you would benefit from disabling any functions described there. |