Disable php functions via .htaccess

Question

I want to disable few php functions only in a specific folder, I thought of using htaccess:

For example I have tried adding this line:

php_admin_value disable_functions "system, etc.."

However it doesn't work, I just get 500 error, if you know how to make it work, please share.

Appreciate any help on this subject.

-- EDIT --

I have turned on my litespeed and now there are no more errors, but system() is still allowed, I want to turn it off for my server's home folder.

Any solutions ?

Check your server's error log. Details about the 500 will be listed there. most likely you've got a syntax error in the .htaccess file, which can also involve things like using a directive which the server config does not allow. — Marc B
– Marc B, Commented Oct 18, 2011 at 17:07
I think it's about your syntax, check error log as Marc B said — user973254
– user973254, Commented Oct 18, 2011 at 17:11
I got this error: "..../public_html/.htaccess: Invalid command 'php_admin_value', perhaps misspelled or defined by a module not included in the server configuration" - I have also tried "php_value" but the same error occurs, do you know the correct command for this ? — user991329
– user991329, Commented Oct 18, 2011 at 17:31

user149341 · Accepted Answer · 2011-10-18 17:15:22Z

3

php_admin_value is not valid in .htaccess files. It can only be used in httpd.conf. See: http://php.net/configuration.changes for details.

Use php_value instead, or add the directive in a <Location> or <Directory> block in httpd.conf.

answered Oct 18, 2011 at 17:15

user149341

Sign up to request clarification or add additional context in comments.

3 Comments

user991329 Over a year ago

so should I use "php_value system off" etc each command separately, would this work ?

user149341 Over a year ago

php_value disable_functions "system" or something of the sort.

letmaik Over a year ago

Well, it simply can't be done in .htaccess. The other suggestions are fine.

wlf · Accepted Answer · 2013-04-25 22:08:15Z

3

http://www.php.net/manual/en/ini.core.php#ini.disable-functions

This directive allows you to disable certain functions for security reasons. It takes on a comma-delimited list of function names. disable_functions is not affected by Safe Mode.

Only internal functions can be disabled using this directive. User-defined functions are unaffected.

This directive must be set in php.ini For example, you cannot set this in httpd.conf.

answered Apr 25, 2013 at 22:08

wlf

8611 gold badge9 silver badges15 bronze badges

Comments

KodeFor.Me · Accepted Answer · 2011-10-18 17:04:31Z

0

Propably the HTTP Status code 500 comes from wrong .htaccess file.

You can rename the .htaccess file to something else for a while to check if the problem comes from there. If so you can then paste the .htaccess code here to give you the solutions.

answered Oct 18, 2011 at 17:04

KodeFor.Me

13.5k30 gold badges104 silver badges174 bronze badges

Comments

echo_Me · Accepted Answer · 2011-10-18 18:44:18Z

0

in your .htaccess put

php_admin_value disable_functions " "

This is only if you are allow to do so. Give it a shot.

answered Oct 18, 2011 at 18:44

echo_Me

37.2k5 gold badges62 silver badges81 bronze badges

1 Comment

wlf Over a year ago

this is wrong. see php.net/manual/en/ini.core.php#ini.disable-functions

Collectives™ on Stack Overflow

Disable php functions via .htaccess

4 Answers 4

3 Comments

Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

3 Comments

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related