PHP exec function

[hawksfan]

Just curious what the general consensus on enabling this function at a global level would be (since it sounds like that's the only way to enable it)?

[.Immortal]

Just curious what the general consensus on enabling this function at a global level would be (since it sounds like that's the only way to enable it)?

Are you hosted on a shared/dedicated/vps? If on a vps/dedicated, are you hosting just yourself or also other people?

[hawksfan]

VPS & I'm just hosting myself, no plans to share it with anyone else. As I understand it, this function just applies to security within the server across accounts hosted on it, is that correct?

[.Immortal]

Well the php exec function correct me if I'm wrong anyone executes external programs. Usually shared hosts disable this function as malicious users can wreak havoc with it. Since I haven't had a need for the function, I have disabled by default. I suggest if you don't have a need for it, just disable it in php.ini.

[3dblake]

The function itself isn't evil, it lets you run system commands via PHP, if you have a need for it then I'd say leave it on. Always be diligent about keeping everything else up to date on the box, especially your PHP apps.