US: 1-941-4621-069
Cyprus: 3-572-2052-781

Go Back Forums > ISPmanager > Troubleshooting

Thread Tools
Old 09-24-2012, 12:53 AM   #1
Junior Member
Join Date: Oct 2011
Posts: 25
paketschubser is on a distinguished road
Default disabled PHP functions


since one of the last ISPmanager updates the installtion routine seems to disable the PHP functions "exec,passthru,shell_exec,system,proc_open,pop en" for the Apache PHP module (at least on Debian in /etc/php5/apache2/php.ini).
As these functions are essential for several software to work (e.g. Softaculous, Typo3 ImageMagick functions, ...) this seems to be a bad idea.

I guess this change was made because of security concerns when mod_php is used with the Apache mpm prefork or worker. Since we're using the mpm ITK where mod_php is also called with the UID of the website owner we don't have to worry about security in combination with mod_php.

Could you please state why this change was made and how to handle problems with software which is no longer working.
Maybe a better way would be to check which mpm is installed before auto disabling several PHP functions.

Last edited by paketschubser; 09-24-2012 at 10:01 AM.
paketschubser is offline   Reply With Quote
Old 09-24-2012, 07:20 PM   #2
ISPsystem team
slava's Avatar
Join Date: May 2008
Location: ISPsystem
Posts: 588
slava is on a distinguished road

These functions are disabled once the installation. We tried to disable all cases potentially unsafe for the user, for the reason that it can reinstall apache further through the panel. The panel does not replace any the server administrator for after-install configuration.
slava is offline   Reply With Quote

itk, mod_php, mpm, php

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 12:11 PM.