UnixServerAdmin

Server Administration & Management

How to Enable PHP function for a one account

IF you disable PHP function in php.ini file and if you want to enable any particular function only one account . Then You can however use suhosin to enable a function for one domain only.

After installing suhosin, remove all functions from disable_functions in php.ini and add in php.ini suhosin.executor.func.blacklist = “exec,passthru,shell_exec” and all the functions that you want to disable globally.

After that for each domain in the virtual host section you can add suhosin.executor.func.blacklist again, but without the function that you need to enable. And so you will enable that function only for one domain.

Example:
————————————————————————————————–
<VirtualHost 127.0.0.1>
………..
………..
<IfModule mod_php4.c>
php_admin_value open_basedir “/usr/lib/php”
</IfModule>
<IfModule mod_php5.c>
php_admin_value open_basedir “/usr/lib/php”
php_admin_value suhosin.executor.func.blacklist = “passthru,shell_exec”
</IfModule>
…….
……
</VirtualHost>
————————————————————————————————–

In this example exec has been enabled for the VirtualHost. This way it will be better as you do not neet to modify all the virtual hosts only the ones that you need to enable one or more functions.

Advertisements

July 27, 2011 Posted by | Apache, PHP | , , | Leave a comment