---
id: 50
title: PHP for hosting tips
date: 2004-08-15T21:07:58+00:00
author: hky
layout: post
guid: http://lostfocus.org/blog/?p=50
permalink: /php-for-hosting-tips/
dsq_thread_id:
 - 1373378721
tags:
 - Web Programming
---
Belakangan marak yang namanya injection via php..

Saya cuma bisa nyaranin sebaiknya seting php dengan berikut di php.ini

safe_mode = On

doc_root = /var/www/htdocs

user\_dir = /home/*/public\_html

disable\_functions = escapeshellarg, escapeshellcmd, exec, passthru, proc\_close, proc\_get\_status, proc\_nice, proc\_open, proc\_terminate, shell\_exec, system

Jangan lupa.. baca juga tentang

[PHP Manual – Security](http://id.php.net/manual/en/security.intro.php)

Juga ada tool buat check php yang terinstall

[phpunit](http://phpunit.sourceforge.net/)

php bisa jadi teman.. bisa juga jadi musuh dalam selimut

You are viewing proxied material from sdf.org. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.