Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Enabling a function for one account

[cyberturk]

Hello

In my php.ini, exec funtion is disabled. One of my clients want to use it for his coppermine installation

I dont use php su exec

Is there a way to give him permision to use this function

Thanks for your answers

[ISPserver]

As I know you need enable function in php.ini and then disable it for all VirtualHost in httpd.conf

It's beckouse php do not exist directive 'enable_function'

Also you can see "http://www.webhostingtalk.com/showthread.php?t=427365"

[Cristi4n]

You can however use suhosin to enable a function for one domain only.
How can you do that ?
After installing suhosin, remove all functions from disable_functions in php.ini and add in php.ini suhosin.executor.func.blacklist = "exec,passthru,shell_exec" and all the functions that you whant to disable globally.
After that for each domain in the virtual host section you can add suhosin.executor.func.blacklist again but without the function that you need to enable. And so you will enable that function only for one domain.
Example:
<VirtualHost 127.0.0.1>
...........
...........
<IfModule mod_php4.c>
php_admin_value open_basedir "/usr/lib/php"
</IfModule>
<IfModule mod_php5.c>
php_admin_value open_basedir "/usr/lib/php"
php_admin_value suhosin.executor.func.blacklist = "passthru,shell_exec"
</IfModule>
.......
......
</VirtualHost>

In this example exec has been enabled for the VirtualHost.
This way it will be better as you do not neet to modify all the virtual hosts only the ones that you need to enable one or more functions.

[webstyler]

:/

I've try to make this but not work

suhosin is correctly worked

under httpd.conf insert for virtualhost function without what I mean ..

but when try to use function :
"Warning: shell_exec() has been disabled for security reasons .."

??

Any suggest ?