diff --git a/PHP7.3/Dockerfile b/PHP7.3/Dockerfile index 4df5c3e..b9b4173 100644 --- a/PHP7.3/Dockerfile +++ b/PHP7.3/Dockerfile @@ -60,7 +60,7 @@ COPY conf/apache.conf /etc/apache2/conf-available/z-app.conf COPY conf/ports.conf /etc/apache2/ports.conf COPY conf/security.conf /etc/apache2/conf-enabled/security.conf -RUN a2enmod rewrite remoteip && \ +RUN a2enmod rewrite remoteip headers && \ a2enconf z-app USER noroot diff --git a/PHP7.3/conf/php.ini b/PHP7.3/conf/php.ini index 7ae56a8..1339373 100644 --- a/PHP7.3/conf/php.ini +++ b/PHP7.3/conf/php.ini @@ -296,9 +296,8 @@ serialize_precision = 17 ; This directive allows you to disable certain functions for security reasons. ; It receives a comma-delimited list of function names. ; http://php.net/disable-functions -;disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, -; VB ADD -disable_functions = exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, +disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, + ; This directive allows you to disable certain classes for security reasons. ; It receives a comma-delimited list of class names. @@ -836,9 +835,7 @@ max_file_uploads = 50 ; Whether to allow the treatment of URLs (like http:// or ftp://) as files. ; http://php.net/allow-url-fopen -;allow_url_fopen = On -;VB ADD -allow_url_fopen = Off +allow_url_fopen = On ; Whether to allow include/require to open URLs (like http:// or ftp://) as files. ; http://php.net/allow-url-include