D
D
DarkKefir2018-03-14 05:28:17
symfony
DarkKefir, 2018-03-14 05:28:17

How secure is proc_open?

The Debian Wheezy VDS is running PHP 5.6 + nginx.
For security purposes, the settings ( /etc/php5/fpm/php.ini ) have some features disabled, including proc_open.
It was necessary to use the Symfony\Component\Process component , which required the inclusion of the mentioned proc_open.
Google suggested that enabling this feature is safe in the following cases:
- if Apache is not used;
- if a separate process is used, where PHP is launched with its own ini-file providing the desired configuration.
Is it safe in reality?
What would you recommend to do in my case? [noob detected]
Thanks for the replies.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question