disable eval in php.ini

h4ni

• March 31, 2016 04:31

Hello I my server eval are disabled in
disable_functions = "eval,exec,system,shell_exec,proc_open,show_source,mail,sendmail,popen,phpinfo,escapeshellarg,escapeshellcmd,passthru,symlink,eval/*yfuxi*/"
But i have a virus/spam php code that can send spam mail with code like this [Removed] How Can i block this?

• 

  cPanelMichael

  • March 31, 2016 18:05

  Hello :) Are you utilizing Mod_Security? I know certain rulesets have rules to help block these types of scripts. EX: OWASP ModSecurity CRS - cPanel Knowledge Base - cPanel Documentation Thank you.

  0
• 

  h4ni

  • April 01, 2016 10:36

  Hello Can i block only one user/domain?

  0
• 

  24x7server

  • April 01, 2016 12:06

  Hello :), Yes, you can enable/disable mod_security for single domain using following cPanel addon: cPanel App Catalog :: ConfigServer ModSecurity Control

  0

Please sign in to leave a comment.