1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

PHP disable function and classes for xenforo

Discussion in 'Server Configuration and Hosting' started by Sheratan, Nov 27, 2013.

  1. Sheratan

    Sheratan Well-Known Member

    What PHP function and classes that safe to be disabled for a server that serve only xenforo?
  2. jwright

    jwright Active Member

    I believe all of these are safe:

    disable_functions = 'ini_alter,ini_restore,ini_set,phpinfo,chgrp,chmod,chown,fputs,lchgrp,tmpfile,touch,link,symlink,exec,passthru,proc_open,shell_exec,system'
    This is a pretty good list I use to lock things down a bit that won't interfere with most "normal" applications. "phpinfo" will break the function to display phpinfo in the admin area, so you might want to remove that if that page is important to you.
    Last edited: Nov 27, 2013
    Sheratan likes this.
  3. jwright

    jwright Active Member


    Just to update, "fwrite" can't be disabled as it will break mail functionality of XF. I've removed it from the list in my OP.
    maszd likes this.

Share This Page