Drupal 7的SuHosin配置？

Question

我的网站托管提供商决定使用苏福林 php扩展来保护我的网站。

对于一些Drupal 7站点，我现在收到了大量错误，无法登录：

Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 675 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 678 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 679 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 680 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 682 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in drupal_environment_initialize() (line 684 of /home/reseller1/example.com/includes/bootstrap.inc).
Warning: ini_set() has been disabled for security reasons in include_once() (line 300 of /home/reseller1/example.com/sites/default/settings.php).
Warning: ini_set() has been disabled for security reasons in include_once() (line 301 of /home/reseller1/example.com/sites/default/settings.php).
Warning: ini_set() has been disabled for security reasons in include_once() (line 309 of /home/reseller1/example.com/sites/default/settings.php).
Warning: ini_set() has been disabled for security reasons in include_once() (line 316 of /home/reseller1/example.com/sites/default/settings.php).
Warning: ini_set() has been disabled for security reasons in drupal_settings_initialize() (line 772 of /home/reseller1/example.com/includes/bootstrap.inc).

在没有这些ini_set语句的情况下，是否有其他的引导程序？我们能把它们放到Drupal身上吗？

Answer 1

我想您可以尝试在本地覆盖设置。

php.ini

文件。

例如。

/var/www/my-site/php.ini

disable_functions = system

默认情况下，添加一个函数而不是您的主机使用的列表。

如果这样做有效，您可以在那里添加其他函数，例如

disable_functions = exec,shell_exec,popen,passthru,proc_open,system,pcntl_exec

否则，您将需要对Drupal进行黑客攻击，以删除这些ini_set声明并将它们移动到本地php.ini文件中。(不建议)

你也可以向你的网络主机寻求帮助(推荐)

或者，寻找一个新的网站主机。