Skip to content

Commit dcb3a85

Browse files
authored
don't disable show_source (hestiacp#2746)
i'm guessing it's inclusion is due to some paranoid sysadmin thinking the *name* sounds scary, without even looking at what the function actually does. Anyhow, the function is just an alias of highlight_file() , so either both highlight_file() and show_source() should be disabled, or neither of them should be. Also the function is as dangerous as file_get_contents() (:
1 parent acdf4bf commit dcb3a85

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/deb/php/php.ini

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -309,7 +309,7 @@ serialize_precision = -1
309309
; This directive allows you to disable certain functions.
310310
; It receives a comma-delimited list of function names.
311311
; http://php.net/disable-functions
312-
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,show_source,
312+
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
313313

314314
; This directive allows you to disable certain classes.
315315
; It receives a comma-delimited list of class names.

0 commit comments

Comments
 (0)