Jump to content

Dangerous PHP Functions enabled. Have access to PHP.ini.


Recommended Posts

Hi there,

I am presented with this.

Could contain: Text, Computer Hardware, Electronics, Hardware

Looking through the forums, this appears to be an issue with some hosts (Mine is BlueHost). Per a technical support thread on these forums, I followed these instructions and added this following code to my php.ini file days ago.

Could contain: Text, Page

However, I still have the notification warning me of the dangerous php functions. Any insight?

Edited by AriCode
Link to comment
Share on other sites

Maybe verify what PHP settings you are really running with in the ACP?

You can run phpinfo from the Get Support page (under Tools & Diagnostics sidebar).

Scroll down to see what disable_functions is set to... Or, check out all the other settings in the phpinfo page...

Link to comment
Share on other sites

One idea since they have separated cloud vs. self-hosted is why do self-hosted clients still have to deal with this, and why can't we dismiss it permanently? I mean isn't it our responsibility to secure our own server, and since we are shouldn't we be allowed to dismiss it completely? I know with shared hosting it's sometimes impossible to dismiss this message. Just a thought.

Link to comment
Share on other sites

14 minutes ago, nodle said:

One idea since they have separated cloud vs. self-hosted is why do self-hosted clients still have to deal with this, and why can't we dismiss it permanently? I mean isn't it our responsibility to secure our own server, and since we are shouldn't we be allowed to dismiss it completely? I know with shared hosting it's sometimes impossible to dismiss this message. Just a thought.

Might want to post that in the feedback forum instead in the middle of a help topic.  🙂 

Link to comment
Share on other sites

1 hour ago, nodle said:

One idea since they have separated cloud vs. self-hosted is why do self-hosted clients still have to deal with this, and why can't we dismiss it permanently? I mean isn't it our responsibility to secure our own server, and since we are shouldn't we be allowed to dismiss it completely? I know with shared hosting it's sometimes impossible to dismiss this message. Just a thought.

It's not separate at all, The apps are the same regardless whether they're self hosted or not.

This warning is most certainly for classic self-hosted and not our platform too, it's telling you that the server you're using is potentially insecure. Not just from your account on the server, but potentially other accounts on the server may be able to use these functions to access your data. It's something that needs securing properly to protect your data.

Link to comment
Share on other sites

11 hours ago, AriCode said:

Hi there,

I am presented with this.

Could contain: Text, Computer Hardware, Electronics, Hardware

Looking through the forums, this appears to be an issue with some hosts (Mine is BlueHost). Per a technical support thread on these forums, I followed these instructions and added this following code to my php.ini file days ago.

Could contain: Text, Page

However, I still have the notification warning me of the dangerous php functions. Any insight?

There shouldn't be quotes around the functions, and you will have to use SHH to restart Apache or Nginx before any changes will take place.

Link to comment
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...