#20689 [Com]: php_admin_value disable_functions not working as it should

ID: 20689 Comment by: ch at heesch-it dot de Reported By: webmaster at walia dot com Status: Wont fix Bug Type: *Configuration Issues Operating System: w2k and linux both PHP Version: 4.2.3 New Comment: Please consider implementing the possibility of using disable_functions in a per-directory or per-virtualhost environment! As my predecessors already said, the security advantage is much more interesting than a slight perfomance loss. It's no use having great performance on a machine which was damaged by some user (might it be intended or not). What do you think about this solution: Allowing different php.ini files in different virtual hosts? If this was implemented, many admins would be relieved! Previous Comments: ------------------------------------------------------------------------ [2003-04-30 11:56:24] csamsel at gmxpro dot de if the performance penalty is huge, make php_admin_value disable_functions possible through a configure option. That would be nice. If not, running PHP on a server hosting free and payed sebspace is almost not possible. Running two apache makes the machine probably slower than implementing this feature. ------------------------------------------------------------------------ [2003-04-30 11:50:22] philip@php.net The fact that disable_functions must be set in php.ini (and not httpd.conf) is indeed documented under disable_functions, see: http://www.php.net/manual/en/features.safe-mode.php There is also an open documentation bug to document every directive that follows this behavior but nobody has answered this call. Here's that report: http://bugs.php.net/bug.php?id=11598 ------------------------------------------------------------------------ [2003-04-30 11:33:08] bugs dot php at jensthebrain dot de Could you please change the documentation to reflect this behaviour? ------------------------------------------------------------------------ [2002-11-27 22:01:44] rasmus@php.net You can run multiple services. So simply run 2 Apaches on different ports. Stick a reverse proxy out in front to redirect the requests appropriately and so all requests will be coming in on port 80 from outside. But, this is not the appropriate place to teach you how to design a hosting solution. Do a bit of research on your own. ------------------------------------------------------------------------ [2002-11-27 21:56:51] webmaster at walia dot com cant run a seperate instance of apache on w2k when it is running as a service, can i ? and how to run a seperate instance of php? can you explain this a bit more in detail? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/20689 -- Edit this bug report at http://bugs.php.net/?id=20689&edit=1