DIsable php functions - is it safe ?

[gi...@shaw.ca]

Hi folks,

our security monitoring software registered an incident on a V2 installation.

One of the (canned) recommendations is to disable dangerous php functions in php.ini

-exec

-shell_exec

-system

These are currently all enabled. Will disabling them prevent Islandora V2 from functioning ?

Thanks

[Seth Shaw]

On first glance, I’m not thinking of any spots in the Islandora code that relies on these. That said, it is possible that Drupal or one of the other modules you use does. I would spin up a testing instance of your site’s code/configuration and perform a smoke-test.

--
Learn more about Islandora in general at islandora.ca and join the community at https://github.com/Islandora/islandora-community/wiki
---
You received this message because you are subscribed to the Google Groups "islandora" group.
To unsubscribe from this group and stop receiving emails from it, send an email to islandora+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/islandora/dc7d2eec-35c0-4104-b0bf-f4af88c9e60en%40googlegroups.com.