Are you aware of the PHP functions which make your program malicious? Some providers will use it widely to disable the PHP functions. Let we see the topic with detailed explanations:

PHP – Hypertext preprocessor. This is very popular and powerful server-side language of scripting. It is used widely to understand the concept of dynamic web pages if the client prefers. It has the characteristics in both good and bad features. Every scripting language will have some drawbacks. In that case, PHP is not special to come out of the particular point. Here, in this article- we are going to disable the PHP dangerous function from the server of web hosting. You can code the program or debug the program as per your own requirement.

Do the hackers can hack even on the scripting language?

It has the support from many databases such as MySql, MS SQL and the Oracle. Definitely, from the end of these databases you will have the dangerous PHP function which makes your scripting language so malicious. This kind of techniques will be processed by the hacker who wants you to push in a terrific stage. The hacker can hack your data from the insecure server data – you can’t even imagine the result once if it hi-jacked.

If the hacker, hi-jacked your PHP functions then all-over coding functionalities will be under the hacker control. We have mentioned below some PHP dangerous functions. Please check:

Apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd and eval.

Malicious scripting functions-You have to know as an admin:

Here we have listed only 6 PHP functions. Don’t think only 6 codes are dangerous to your scripting language. You have nearly more than 50 PHP functions. Just have a glance on all 50 PHP functions to disable it. To do that, you can add the disable_functions in manual process to the WHM. You have to add the disable_functions to the php.ini file or to the interface of local.ini files.

Let’s see how to add the PHP functions to the WHM by configuring PHP:

Step 1: First, login to the account WHM using your username and password.

Step 2: Click the home menu and choose “Software” option.

Step 3: Now select the “MultiPHP INI Editor”.

Step 4: Tap the “Editor Mode” and you will get the drop-down list.

Step 5: Once if you get the drop-down list, you have to select the PHP version.

Step 6: You will now get the PHP configuration window and search the “disable_functions”.

You will get the screen display as

; The directive allows you to disable certain functions for security reasons.

; It receives a comma-delimited list of functions names. This directive is

;*Not* affected by whether safe mode is turned on or off.

; http://php.net/disable-functions

disable_functions =
Now you have to add:

; The directive allows you to disable certain functions for security reasons.

; It receives a comma-delimited list of functions names. This directive is

;*Not* affected by whether safe mode is turned on or off.

; http://php.net/disable-functions

disable_functions = “apache_child_terminate, apache_get_modules, shell_exec, exec, popen, apache_note, apache_sentev…
Step 7: You can save the above method by clicking the button “Save”.

Note: Whenever you disable the function, you will get the message as warning. This is for security reasons.
Author
bhawanisingh
Views
2,464
First release
Last update
Rating
0.00 star(s) 0 ratings
Top