ServerBuddies Support Blog

Php Hardening option allow_url_fopen and allow_url_include

Set

Disabling this option prevents attackers from opening remote files from your server via file inclusion vulnerabilities.

Set

Disabling this option prevents attackers from including remote files from your server via file inclusion vulnerabilities.

PHP Checklist Parameter disable_functions

Values: A comma-separated list of functions to disable.

This parameter takes a comma-separated list of PHP functions you wish to disable. You will likely want to disable most or all of the PHP functions that have the ability to execute code remotely. You should take the time to talk to your developers and have them standardized on a particular function for shell operations as well.

Example:

Editing Your php.ini File

Cpanel server’s php.ini file is located at /usr/local/lib/php.ini. Cpanel strongly recommend using WHM’s PHP Configuration Editor feature (Main >> Service Configuration >> PHP Configuration Editor) to edit PHP’s configuration file.

You must access the Advanced Configuration Editor to change many of the settings.

Example:

safe_mode

Safe mode attempts to solve many of the problems associated with using PHP in a shared hosting environment.
It checks the user ID (UID) of the PHP script and the files and directories it attempts to access. If the UIDs do not match, the script will not be allowed to access the requested file or directory.
note

Note: This feature is deprecated as of PHP 5.3.0.

Reference: http://cpanel.net/

Disable ipv6 on RHEL 4 and 5

Edit /etc/sysconfig/network and change

Edit /etc/modprobe.conf and add these lines (if they’re not in it):

Stop the ipv6tables service by typing:

Disable the ipv6tables service by typing:

IPv6 will be disabled after the next reboot of the system.

update_php_mime_types Examples

Update all user .htaccess files that already contain PHP MIME mappings.

Set buddy’s main .htaccess file to use PHP 4 by default.

Remove all PHP AddHandler lines and marker comments from buddy’s .htaccess files.

Reference: http://cpanel.net/