Uhla lwemibhalo ye-athikili
Uma usebenzisa i-HestiaCP ukuphatha iseva yakho, ngezinye izikhathi kungadingeka ukuthi unike amandla eminye imisebenzi ye-PHP ekhutshaziwe ngokuzenzakalelayo, njenge-shell_exec, passthru, system, kanye ne-exec.
Le misebenzi inamandla kakhulu, kodwa futhi iveza izingozi ezithile zokuphepha, ngakho-ke ngaphambi kokuyivumela, qiniseka ukuthi indawo yeseva yakho ivikelekile futhi ivumela ukufinyelela kubasebenzisi abathembekile kuphela.
Kungani ngidinga ukunika amandla le misebenzi ye-PHP?
Le misebenzi iwusizo kakhulu ezimweni ezithile.
Isibonelo, le misebenzi ibalulekile uma udinga ukunika amandla ama-plugin athile e-WordPress noma uma udinga ukwenza imiyalo yesistimu kuseva.
Noma kunjalo, le misebenzi iphinda ibeke izingozi ezingaba khona zokuphepha.
Ukusebenzisa okungalungile kungase kuholele ekuhlaselweni kweseva, ngakho-ke sicela uqhubeke ngokuqaphela.
Hlela ifayela le-php.ini
Ukuze unike amandla le misebenzi, okokuqala udinga ukuhlela ifayela le-php.ini.
Leli ifayela lokumisa le-PHP, elilawula izilungiselelo ezahlukahlukene ze-PHP.

Isinyathelo 1: Thola ifayela le-php.ini
Ku-HestiaCP, ungathola futhi uhlele ifayela le-php.ini ngale ndlela elandelayo:
- Faka iphaneli yokulawula ye-HestiaCP.
- Zulazulela kuzilungiselelo zeseva.
- Chofoza Hlela Isevisi ye-PHP (isithonjana sepensela siyavela uma uhambisa phezu kwegama lesevisi).
- Khetha izinketho ezithuthukisiwe.
Lapha, ungalungisa ifayela le-php.ini.
Isinyathelo sesi-2: Lungisa izilungiselelo ze-disable_functions
Efayeleni le-php.ini, kukhona ukulungiselelwa okubizwa ngokuthi disable_functions.
Lesi silungiselelo sichaza ukuthi yimiphi imisebenzi ye-PHP ekhutshaziwe.
Ukuze unike amandla i-shell_exec, i-passthru, uhlelo, kanye ne-exec, udinga ukuzisusa ohlwini lwe-disable_functions.
Khubaza_izilungiselelo ngaphambi kokulungiswa:
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
Kulokhu kulungiselelwa, i-shell_exec, i-passthru, isistimu, kanye ne-exec kukhutshaziwe.
Izilungiselelo ezilungisiwe ze-disable_functions:
disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,proc_open,popen
Kulokhu kulungiselelwa, i-shell_exec, i-passthru, isistimu, kanye ne-exec kususiwe, okwenza kube lula ukwenza le misebenzi.
Isinyathelo sesi-3: Londoloza izinguquko
Ngemva kokuqeda ukuguqulwa, gcina ifayela le-php.ini.
Qinisekisa ukuthi zonke izinguquko zigcinwe ngendlela efanele ukuze kusetshenziswe ukucushwa okusha.
Qala kabusha isevisi ye-PHP
Ngemva kokulungisa nokugcina ifayela le-php.ini, udinga ukuqala kabusha isevisi ye-PHP ukuze izinguquko zisebenze.
Ungaqala kabusha insiza ye-PHP ngokulandela lezi zinyathelo:
- Buyela kuphaneli yokulawula ye-HestiaCP.
- Zulazulela kuzilungiselelo zeseva.
- Khetha isevisi ye-PHP bese uchofoza Qala kabusha.
Qinisekisa ukucushwa
Ngemva kokuqalisa kabusha isevisi ye-PHP, ungaqinisekisa ukuthi le misebenzi inikwe amandla ngokusebenzisa umbhalo we-PHP olula.
Isibonelo, ungakha ifayela le-PHP ngokuqukethwe okulandelayo:
<?php
echo shell_exec('echo Hello World');
Bese, finyelela ifayela ngesiphequluli Uma okukhiphayo kungu-"Sawubona Umhlaba", kusho ukuthi umsebenzi we-shell_exec unikwe amandla.
Iseluleko sezokuphepha
Nakuba le misebenzi inikwe amandla, qiniseka ukuthi usebenzisa ukuqaphela.
Qiniseka ukuthi iseva yakho ivikelekile futhi abasebenzisi abathembekile kuphela abakwazi ukufinyelela lezi zici.
Buyekeza njalo isofthiwe yeseva yakho futhi usebenzise amaphasiwedi aqinile nezinye izindlela zokuphepha ukuze uvikele iseva yakho.
总结
Lesi sihloko sichaza indlela yokuvula imisebenzi ye-PHP njenge-shell_exec, passthru, system, kanye ne-exec ku-HestiaCP.
Nakuba le misebenzi inamandla kakhulu, iphinde ibe nezingozi zokuphepha.
Ngakho-ke, lapho uvumela le misebenzi, qiniseka ukuthi uqinisekisa ukuthi iseva yakho ivikelekile futhi ivumela kuphela ukufinyelela kubasebenzisi abathembekile.
Ngithemba ukuthi lesi sihloko singaba usizo kuwe, uma unemibuzo, sicela ukhululeke ukuxhumana nami!
Ngethemba ukuthi isihloko esithi "Ungayivumela kanjani imisebenzi ye-PHP i-shell_exec, i-passthru, uhlelo, kanye ne-exec?" esabiwe kubhulogi likaChen Weiliang ( https://www.chenweiliang.com/ ) sizokusiza.
Zizwe ukhululekile ukwabelana ngalesi sixhumanisi sendatshana: https://www.chenweiliang.com/cwl-31853.html
