hello I have some customers' web page on ubuntu11 with suhosin patch. I am going through some commands to be disabled in php.ini. Do I should disable apache_setenv in there ? Could you give me recommended disabled commands about that ? Thanks
I think it's safe to disable that function. Other functions you can disable for security reasons are dl,exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source.