Skip to content

cktricky/DangerousPHPFunctions

 
 

Repository files navigation

This is a list of potentially dangerous PHP functions which should be disabled in most of the PHP web hosting environments.

The php_dangerous.txt file contains the categorized list of these functions. 
The likely_used.txt file contains functions which can be used dangerously but are required by many applications.

Format: 

    [Category name ]
    function_name # comment

The generate_ini.sh script generates a php.ini entry from the list. Usage:

generate_ini.sh php_dangerous.txt

DISCLAIMER
==========

Use at your own risk! Hardening should always be done in accordance with the current environment.

About

Comprehensive list of potentially dangerous PHP functions

Resources

Stars

13 stars

Watchers

1 watching

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages

  • Ruby 92.2%
  • PHP 6.3%
  • Shell 1.5%