#/usr/local/php/bin/php –i|head //查看php.ini路径为/usr/local/php/etc/php.iniphp
1、配置disable_functionshell
#vim /usr/local/php/etc/php.iniapache
disable_functions=eval,assert,popen,passthru,escapeshellarg,escapeshellcmd,passthru,exec,system,chroot,scandir,chgrp,chown,escapeshellcmd,escapeshellarg,shell_exec,proc_get_status,ini_alter,ini_restore,dl,pfsockopen,openlog,syslog,readlink,symlink,leak,popepassthru,stream_socket_server,popen,proc_open,proc_closevim
//禁止掉这些函数浏览器
2、配置error_logsocket
#vim /usr/local/php/etc/php.ini函数
display_errors=off //若是为on则在浏览器访问显示错误spa
log_errors=onrest
error_log =/usr/local/php/logs/php_errors.log日志
# mkdir /usr/local/php/logs/ //建立错误日志生成目录
# chmod 777 !$ //权限改成777
找到error_reporting修改成error_reporting = E_ALL | E_STRICT
# /usr/local/apache2/bin/apachectl graceful //从新加载
3、配置open_basedir
#vim /usr/local/php/etc/php.ini
open_basedir = /data/www/:/tmp/ //限制用户只能访问/data/www和/tmp目录
#vim httpd.conf //能够在Apache中修改
php_admin_value open_basedir “/data/www/:/tmp/” 限制用户访问