php.ini not allowing me to disable_functions

Question

I put this in the php.ini file:

disable_functions="popen,exec,system,passthru,proc_open,shell_exec,show_source,phpinfo"

But I can still call them (tested exec and shell_exec. I have restarted the webserver several times.

(under windows).

the best way to see the actual php.ini settings in effect, is to call phpinfo() and see what has been set — periklis
– periklis, Commented May 28, 2013 at 18:40
check under the "loaded php.ini file", if it's the same path you have actually changed — periklis
– periklis, Commented May 28, 2013 at 18:48
I can turn safe mode on and off with that php.ini. Yes its the correct path. — user1166981
– user1166981, Commented May 28, 2013 at 18:51
try removing the double quotes, leaving the comma-separated list — periklis
– periklis, Commented May 28, 2013 at 18:53

periklis · Accepted Answer · 2013-05-28 18:56:56Z

8

Try removing the double quotes:

disable_functions=popen,exec,system,passthru,proc_open,shell_exec,show_source,phpinfo

answered May 28, 2013 at 18:56

periklis

10.2k6 gold badges62 silver badges68 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

it's pretty hilarious that this answer is exactly the opposite of stackoverflow.com/questions/24387209/…

@anarcat nevertheless, this is the correct answer, see php.net/manual/en/ini.sect.safe-mode.php for an example