# Disable\_functions

**URL:** <https://forum.virtualmin.com/t/disable-functions/137567>\
**Category:** Help! (Home for newbies)\
**Created:** [July 13, 2026, 2:37pm UTC](https://forum.virtualmin.com/t/disable-functions/137567 "2026-07-13T14:37:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jimdunn](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jimdunn/32/3487_2.png) [@jimdunn](https://forum.virtualmin.com/u/jimdunn)\
**Post date:** [July 13, 2026, 2:37pm UTC](https://forum.virtualmin.com/t/disable-functions/137567/1 "2026-07-13T14:37:12Z")

</div>

Someone mentioned having a “comprehensive disable\_functions set”…

I wanted to know if anyone would care to share their disable\_functions= with us??

---

<div class="post-metadata">

**Author:** ![Armmiss](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/eb9ed0/32.png) [@Armmiss](https://forum.virtualmin.com/u/Armmiss)\
**Post date:** [July 13, 2026, 8:24pm UTC](https://forum.virtualmin.com/t/disable-functions/137567/2 "2026-07-13T20:24:39Z")

</div>

For my servers, I’m currently using the following `disable_functions` list:

```ini
disable_functions = exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname

```

So far, I haven’t encountered any compatibility issues with the applications I host.

I also shared some additional PHP and server hardening recommendations in this thread, in case it’s useful to anyone:

> [@Hardening questions](https://forum.virtualmin.com/t/hardening-questions/137449):
>
> SYSTEM INFORMATION OS type and version RHEL 10 Webmin version latest Virtualmin version latest Webserver version Apache latest Related packages SUGGESTED Hello everyone, I’m new to Virtualmin after spending more than 10 years using DirectAdmin. I decided to move to Virtualmin because I wanted a solution that is more open source and gives me more flexibility. I’m currently deploying a new server on RHEL 10 and I’d like to harden the system configuration before putting it int…

I’m always interested in comparing configurations, so if anyone has suggestions or sees something worth adding or removing, I’d be happy to hear them.

---

<div class="post-metadata">

**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\
**Post date:** [July 13, 2026, 11:08pm UTC](https://forum.virtualmin.com/t/disable-functions/137567/3 "2026-07-13T23:08:24Z")

</div>

I will add mine here tommorow

---

<div class="post-metadata">

**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\
**Post date:** [July 14, 2026, 6:13pm UTC](https://forum.virtualmin.com/t/disable-functions/137567/4 "2026-07-14T18:13:17Z")

</div>

here you go.

Don’t use the Webmin GUI. Just paste straight into the `php.ini`

```auto
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,system,passthru,popen,exec,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,highlight_file,escapeshellcmd,define_syslog_variables,posix_uname,posix_getpwuid,apache_child_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,escapeshellarg,posix_uname,ftp_exec,ftp_connect,ftp_login,ftp_get,ftp_put,ftp_nb_fput,ftp_raw,ftp_rawlist,ini_alter,ini_restore,inject_code,syslog,openlog,define_syslog_variables,apache_setenv,mysql_pconnect,eval,phpAds_XmlRpc,phpAds_remoteInfo,phpAds_xmlrpcEncode,phpAds_xmlrpcDecode,xmlrpc_entity_decode,fp,fput,shell_exec,apache_get_modulesi,

```

---

<div class="post-metadata">

**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\
**Post date:** [September 12, 2026, 6:13pm UTC](https://forum.virtualmin.com/t/disable-functions/137567/5 "2026-09-12T18:13:56Z")

</div>

Closed on September 12, 2026, 6:13pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
