2

I'm running a setup with PHP 5.3.8 and use php-fpm with its chroot functionality to separate multiple customers. So each customer has it's own chrooted PHP-environment, which is quite fine.

I now want to disallow that a customer can change the memory_limit of his PHP-instance by using ini_set. On the other hand I don't want to disable ini_set completely. So I'm searching for a possibility to disable the possibility to set specific PHP configuration options (like memory_limit) via ini_set.

Does somebody know how to achieve that?

1
  • Look into suhosin it is well suited to hardening PHP for hosting environments, including preventing alteration of the memory_limit
    – cyberx86
    Nov 27, 2011 at 4:02

3 Answers 3

1

You can't, without patching the PHP source code.

1

As cyberx86 noted in his comment, it's at least possible with suhosin to disallow changes to memory_limit during runtime. The configuration option for that in suhoshin is called suhosin.memory_limit.

1

For Apache, you can set something like the following in httpd.conf:

php_admin_value memory_limit 2G

and that will make pointless any line in a script like:

ini_set('memory_limit', '4096M');

You can read more here.

HTH

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .