Voters 3
-
M
-
D
-
3
Disable Posix in PHP by default
- Open
- Subscribe
|
M |
myH2Oservers |
www.php.net/manual/en/intro.posix.php says:
Sensitive data can be retrieved with the POSIX functions, e.g. posix_getpwnam() and friends. None of the POSIX function perform any kind of access checking when safe mode is enabled. It's therefore strongly advised to disable the POSIX extension at all (use --disable-posix in your configure line) if you're operating in such an environment.
We disable posix through custom configure.phpXX for many years already as PHP advices. Is it an idea to add --disable-posix by default in DirectAdmin?