Skip to main content

We are currently experiencing a higher than average ticket volume and as such our responses may be delayed. If your cPanel license is purchased through a partner or a hosting provider you may receive faster support by reaching out to your provider first.

We're currently improving our systems to provide you with a new, more unified login experience.

On a CloudLinux server, a security scan mentions disabling several PHP functions.

Eetion Narcisse
  • Updated

Symptoms

The result of a security scan shows several PHP functions that are recommended to be disabled for /opt/alt/php-internal/etc/php.ini:

mceclip0.png

 

Description 

The /opt/alt/php-internal/etc/php.ini file is a file used internally to CloudLinux:

# rpm -qf /opt/alt/php-internal/etc/php.ini
alt-php-internal-common-7.4.16-6.el7.x86_64

 

Workaround

The security scan for that particular file may be ignored. To address the concern separately, utilize CageFS. Per CloudLinux, "The secure environment is already established by CageFS which limits what processes can see or do to only safe actions." 


You can read more about this on the CloudLinux blog post here:

https://www.cloudlinux.com/blog/entry/php-selector-and-restricting-php-functions 

Related articles