diff --git a/Security/PhpCode.php b/Security/PhpCode.php index d70bfb3e5..b70039a69 100644 --- a/Security/PhpCode.php +++ b/Security/PhpCode.php @@ -24,6 +24,21 @@ namespace phpOMS\Security; */ class PhpCode { + /** + * Disabled functions + * + * @var array + * @since 1.0.0 + */ + public static $disabledFunctions = [ + 'apache_child_terminate', 'apache_setenv', 'define_syslog_variables', 'escapeshellarg', 'escapeshellcmd', 'eval', + 'exec', 'fp', 'fput', 'ftp_connect', 'ftp_exec', 'ftp_get', 'ftp_login', 'ftp_nb_fput', 'ftp_put', 'ftp_raw', + 'ftp_rawlist', 'highlight_file', 'ini_alter', 'ini_get_all', 'ini_restore', 'inject_code', 'mysql_pconnect', + 'openlog', 'passthru', 'php_uname', 'phpAds_remoteInfo', 'phpAds_XmlRpc', 'phpAds_xmlrpcDecode', + 'phpAds_xmlrpcEncode', 'popen', 'posix_getpwuid', 'posix_kill', 'posix_mkfifo', 'posix_setpgid', 'posix_setsid', + 'posix_setuid', 'posix_uname', 'proc_close', 'proc_get_status', + ]; + /** * Deprecated functions *