Configserver Bug

[DrWizzle]

One for you guys here..... Now it's open source, can anyone get to the bottom of this bug? It was on all the old installs, and still exists in 15.00.

I've just installed a fresh DA instance, and set it up. Updated CSF to v15.00 and when you check the server, it will give you tips of what to lock down further if it's left open. I've not got cxs or osm on this server so that message is valid. Also haven't enabled auto_updates yet (will sort a mirror out later for that) but the enigma is the bottom message in the PHP check. I've secured PHP with

# da build secure_php
# da build rewrite_confs

and it's still reporting I should disable fuctions. I've checked the php.ini file and that is perfect. Any ideas on this or bug fixes? Would be good to get this fixed

 

[zEitEr]

and it's still reporting I should disable fuctions. I've checked the php.ini file and that is perfect. Any ideas on this or bug fixes? Would be good to get this fixed

Hello,

As far as I know DirectAdmin patches PHP to ignore disable_functions when running in CLI. And if CSF/LFD checks for disabled functions it most likely uses PHP in CLI mode, it might be the reason of the false report.