How can you do that ?
After installing suhosin, remove all functions from disable_functions in php.ini and add inphp.ini suhosin.executor.func.blacklist = “exec,passthru,shell_exec” and all the functions that you want to disable globally.
After that for each domain in the virtual host section you can addsuhosin.executor.func.blacklist again but without the function that you need to enable. And so you will enable that function only for one domain.
Example:
………..
………..
php_admin_value open_basedir “/usr/lib/php”
php_admin_value open_basedir “/usr/lib/php”
php_admin_value suhosin.executor.func.blacklist = “passthru,shell_exec”
…….
……
In this example exec has been enabled for the VirtualHost. This way it will be better as you do not neet to modify all the virtual hosts only the ones that you need to enable one or more functions.
No comments:
Post a Comment