PHP disable function and classes for xenforo

[Sheratan]

What PHP function and classes that safe to be disabled for a server that serve only xenforo?

 

[JonathanW]

I believe all of these are safe:

disable_functions = 'ini_alter,ini_restore,ini_set,phpinfo,chgrp,chmod,chown,fputs,lchgrp,tmpfile,touch,link,symlink,exec,passthru,proc_open,shell_exec,system'

This is a pretty good list I use to lock things down a bit that won't interfere with most "normal" applications. "phpinfo" will break the function to display phpinfo in the admin area, so you might want to remove that if that page is important to you.

 

[JonathanW]

@Sheratan

Just to update, "fwrite" can't be disabled as it will break mail functionality of XF. I've removed it from the list in my OP.