How do I solve a security issue proc_open ?

[tinoky]

Hi,

In the system/overview/security there is a "high" that says the following:

Quote

High Disable Dangerous PHP Functions
We recommend disabling the following functions on your server. If you do not manage your server yourself, your hosting provider will be able to assist with this.

proc_open

I have DirectAdmin and should be able to adjust it myself. I did find how to get to the php disable_functions in DirectAdmin, but have no idea what to add or remove from it. The following is mentioned:

system,exec,shell_exec,passthru,proc_get_status,proc_nice,proc_terminate,dl,popen,pcntl_exec

• What is it and why does it have such a high security risk?
• Can I make it secure without any problems?
• How do I make it secure?

TIA,

[IveLeft...]

Find your php.ini file and add proc_open to the disabled_functions line, then restart your web server (ie apache)

[tinoky]

Thanks for your help.

Within DirectAdmin I do not find a php.ini file I go to the PHP version and there I added proc_open in disable_functions.
And I do not see how I can restart apache in DirectAdmin.

The warning is still there.

 

 

 

[tinoky]

Ok, found what I was doing wrong, there was a double save feature which I overlooked.
 Fortunately I did not need to restart the web server.