[wp-trac] [WordPress Trac] #48693: Silence ini_set caused error or check if function_exists first

[WordPress Trac]

#48693: Silence ini_set caused error or check if function_exists first
-------------------------------------+-----------------------------
 Reporter:  drazon                   |       Owner:  SergeyBiryukov
     Type:  defect (bug)             |      Status:  accepted
 Priority:  normal                   |   Milestone:  Future Release
Component:  Bootstrap/Load           |     Version:  5.3
 Severity:  normal                   |  Resolution:
 Keywords:  needs-testing has-patch  |     Focuses:
-------------------------------------+-----------------------------
Changes (by jrf):

 * severity:  major => normal


Comment:

 Replying to [comment:24 SergeyBiryukov]:
 > Replying to [comment:23 maltfield]:
 > > Of course, doing so necessitates disabling `ini_set()` as well, as
 that would just allow a script to re-enable disabled functions like
 `exec()`
 >
 > I don't think that's the case. Looking at the
 [https://www.php.net/manual/en/ini.core.php description of core php.ini
 directives] in the PHP manual, `disable_functions` has `INI_SYSTEM` next
 to it, which means it
 [https://www.php.net/manual/en/info.constants.php#constant.ini-mode cannot
 be set by user scripts] (as opposed to `INI_USER` or `INI_ALL`). It can
 only be set  in the `php.ini` file itself, or in `httpd.conf`.


 Exactly.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48693#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform