egoldsmi LiteCart Fan From United States Member since Dec 2023 egoldsmi Dec 12 2023 09:23 PM For example, in php.ini I want to add disable_functions = exec,system (and others) Is there a recommended list that I can use with litecart? Thanks!
tim Founder From Sweden Member since May 2013 tim Dec 12 2023 10:09 PM No nothing needs to be disabled. I would say only mistrustful web hosts disable these features. Industry standard cPanel hosts don't disable any specific functions. If an attacker really wants to get in, they have their ways of getting in one way or the other. I don't think disable_functions would provide much more security. It might slow "you" down more than the attacker. Someone is probably going to say I'm wrong. But that's what I think.