about apache_setenv

[arastirici]

hello

I have some customers' web page on ubuntu11 with suhosin patch.

I am going through some commands to be disabled in php.ini.

Do I should disable apache_setenv in there ?

Could you give me recommended disabled commands about that ?

Thanks

[falko]

I think it's safe to disable that function. Other functions you can disable for security reasons are dl,exec,passthru,shell_exec,system,proc_open,popen ,curl_exec,curl_multi_exec,parse_ini_file,show_sou rce.