disable_functions in users php.ini not working

Benito

• April 22, 2024 13:51

Hello!

I'm trying to disable some PHP functions only for one user who's wordpress is compromised. 

I used the ini editor and saved the changes, the file exists in his public_html but the changes not are loaded in php. 

How can I make this wotk?

Thanks!

 

• 

  Benito

  • April 23, 2024 15:11

  I have to add to the topic. Other changes to the user's php.ini do take effect correctly. At the moment only disable_functions would not be working.

  0
• 

  cPRex Jurassic Moderator

  • April 23, 2024 16:21

  Hey there!  If you scroll up to the top section does that confirm the correct ini is loaded that you are expecting?  Also, in the formatting of the line, there shouldn't be any spaces - they should just be comma-delimited like this:

  disable_functions = exec,passthru,shell_exec,system

  so that could be an issue as well. 

  0
• 

  Benito

  • April 23, 2024 16:53

  Hi Rex, thanks for responding. I tried without space between commas and that didn't work either. I finally changed PHP from ea-php80 to alt-php80 and disabled sendmail with the PHP Selector options.

  I would still like to know why with MultiPHP all the changes are made except disable_functions.

  0
• 

  cPRex Jurassic Moderator

  • April 23, 2024 18:12

  Is it possible the domain is using PHP-FPM?  https://support.cpanel.net/hc/en-us/articles/360051980414-How-to-modify-disable-functions-in-WHM-when-using-PHP-FPM

  0
• 

  Benito

  • April 23, 2024 18:59

  No, is not using PHP-FPM. I think is something related to cloudlinux.

  0
• 

  cPRex Jurassic Moderator

  • April 23, 2024 19:03

  It's possible this isn't allowed in CageFS.  There are details about this here:

  https://cloudlinux.zendesk.com/hc/en-us/articles/5833042816156-How-to-allow-users-to-manage-the-disable-functions-option-via-PHP-Selector

  Could you check that option?

  0
• 

  Benito

  • April 23, 2024 19:43

  Yes, with PHP Selector I can disable functions without problems. The article you shared explains how to add that option to PHP Selector.

  What I can't do is disable features with cPanel's native MultiPHP INI Editor.

  0
• 

  cPRex Jurassic Moderator

  • April 23, 2024 23:41

  It sounds like there is a conflict between the two editors, which likely shouldn't be in use anyway at the same time.  I think we'd need to see a ticket to find out what is happening here.

  0
• 

  Benito

  • April 24, 2024 13:00

  Yeap, we only have MultiPHP enabled for our customers. I enabled alt-php only because I need to disable sendmail for this customer and can't do it with MultiPHP. I will open a ticket. 

  1
• 

  cPRex Jurassic Moderator

  • April 24, 2024 16:09

  If you could post that ticket number here I'd like to follow along.

  0

Please sign in to leave a comment.