Unable to override the default value of "disable_functions" via global php.ini

Follow

Comments

5 comments

  • Avatar
    burnleyvic

    OK folks, we need this bug fixed ASAP, as in YESTERDAY! You've managed to turn entire plesk servers into insecure environment, how is this possible?

    This is what we were using:

    disable_functions = ini_alter,ini_restore,dl,system,exec,passthru,shell_exec,shell,proc_close,proc_open

    and this is what we've got now:

    disable_functions = "opcache_get_status"

    Rubbish!

    1
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello burnleyvic

    Thank you for the feedback.

    This issue has an increased priority.

    However, the exact ETA is to be available later.

    Please, follow this article for updates.

    0
    Comment actions Permalink
  • Avatar
    Webservicesmgmt-lisa

    Is there any follow-up or ETA on this topic?

    0
    Comment actions Permalink
  • Avatar
    Alexey Lapshin

    Hello @Webservicesmgmt-lisa

    There is no ETA for PPPM-9216 currently. Please use suggested workaround.

    0
    Comment actions Permalink
  • Avatar
    Paul Phillips

    This bug is still here in 2021.

    It only affects domains with PHP FastCGI. Domains with PHP-FPM respect the global php.ini settings.

    If I ran through the recommended solution it would overwrite the PHP handler for half of the domains on the server.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request