Roadmap

Feature requests

Bug reports Feature requests

Voters 3

  • D
  • Avatar
  • M
3

Disable Posix in PHP by default

M
 myH2Oservers

www.php.net/manual/en/intro.posix.php says:
Sensitive data can be retrieved with the POSIX functions, e.g. posix_getpwnam() and friends. None of the POSIX function perform any kind of access checking when safe mode is enabled. It's therefore strongly advised to disable the POSIX extension at all (use --disable-posix in your configure line) if you're operating in such an environment.

We disable posix through custom configure.phpXX for many years already as PHP advices. Is it an idea to add --disable-posix by default in DirectAdmin?

  • 2020-09-20 -
A