Unverified50% confidenceFactExact time
disable_functions can disable command execution functions such as exec, shell_exec, system, passthru, popen and proc_open in php.ini, reducing the risk of application-layer code being converted into system commands.
1
Sources
50%
Confidence
Long-term
Relevance
10/29/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDevelopers should disable dangerous PHP functions such as exec, system, and passthru unless business needs require them.70% similarUnverifiedThe disable_functions mechanism only acts at the PHP layer and cannot defend against attackers who use other language extensions or have already obtained higher privileges.61% similarUnverifiedWhen restricted mode is enabled, Claude Code removes all built-in tools capable of executing commands or code, disables WebFetch (unless explicitly specified in --tools), retains only file operation tools within the working directory, rejects bypassPermissions privilege escalation, and ignores user, project, and local settings files.61% similarUnverifiedLinux的seccomp可以白名单方式限制进程可调用的系统调用集合，例如禁止AI进程使用execve或socket等高危调用58% similarUnverifiedThe validator allows specific binaries and subcommands, outright rejects write operation verbs, rejects pipes to a shell, and fails closed on anything it does not recognize.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1111093API
curl https://kongchang.com/api/v1/knowledge/claims/1111093MCP
get_claim(id=1111093)