[wp-trac] [WordPress Trac] #48693: Silence ini_set caused error or check if function_exists first

[WordPress Trac]

#48693: Silence ini_set caused error or check if function_exists first
-------------------------------------+-----------------------------
 Reporter:  drazon                   |       Owner:  SergeyBiryukov
     Type:  defect (bug)             |      Status:  accepted
 Priority:  normal                   |   Milestone:  Future Release
Component:  Bootstrap/Load           |     Version:  5.3
 Severity:  major                    |  Resolution:
 Keywords:  needs-testing has-patch  |     Focuses:
-------------------------------------+-----------------------------

Comment (by SergeyBiryukov):

 Replying to [comment:23 maltfield]:
 > Of course, doing so necessitates disabling `ini_set()` as well, as that
 would just allow a script to re-enable disabled functions like `exec()`

 I don't think that's the case. Looking at the
 [https://www.php.net/manual/en/ini.core.php description of core php.ini
 directives] in the PHP manual, `disable_functions` has `INI_SYSTEM` next
 to it, which means it
 [https://www.php.net/manual/en/info.constants.php#constant.ini-mode cannot
 be set by user scripts] (as opposed to `INI_USER` or `INI_ALL`). It can
 only be set  in the `php.ini` file itself, or in `httpd.conf`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48693#comment:24>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform