James LUCAS Posted April 21, 2020 Posted April 21, 2020 Hello I tried everything I could to clear the alert from the back office : pcntl_exec but it doesn't matter Shared server Ok for configuration test I put in the .user.imi : disable_functions =pcntl_exec I've restarted Apache several times and waited But I still have the alert Can someone help me? I'm attaching the file user.ini Best regards .user.ini
bfarber Posted April 21, 2020 Posted April 21, 2020 I would recommend contacting your host for assistance. A user.ini file isn't necessarily supported on every server - your host would be able to tell you how to make php.ini configuration changes correctly.
James LUCAS Posted April 21, 2020 Author Posted April 21, 2020 Thank you for your response bfarber how important is it to disable pcntl_exec? Best regards
Ryan Ashbrook Posted April 21, 2020 Posted April 21, 2020 In the event your server is ever compromised, the function can be used to execute arbitrary programs on the server, which is a security risk. https://www.php.net/manual/en/function.pcntl-exec
CoffeeCake Posted April 21, 2020 Posted April 21, 2020 11 minutes ago, James LUCAS said: Thank you for your response bfarber how important is it to disable pcntl_exec? Best regards It's an important security recommendation, as that PHP function can be used to execute arbitrary applications should your site be otherwise compromised. It's part of a multi-layered approach to security. I'd recommend you do your best to work with your host to disable the function or look to find one that allows you to do so.
James LUCAS Posted April 21, 2020 Author Posted April 21, 2020 Thank you very much. bfarber Ryan Ashbrook Paul E. Best regards James
Recommended Posts