Just received this from my host, is this something I have to worry about? I am running PHP 5.4.2
Our PHP team has done more research and revised our plans to improve security on our systems as it relates to PHP. These changes will be rolling out in steps over the next two weeks. The first change will go into effect next Wed, July 25th.
This announcement is here to outline exactly which changes will be put into effect so you can take appropriate action to ensure your site will not be harmed. If you are unsure how to modify your PHP or if you need to modify your PHP at all, please contact our support team for assistance.
PHP Security Changes:
1. The use of the backtick operator (``) will be disabled. Any PHP using that operator must be changed.
2. The following PHP functions will be disabled:
exec, system, passthru, popen, chmod, is_file
Any PHP using any of those functions must be changed.
3. php's open_basedir configuration option will be set for each of your sites, limiting you to only be able to open, read, write, or include files from the home directory corresponding to your site or any directory underneath that directory. You will not be able to open a file from another home directory (even if it is one of your own users). This last change may be the most significant and there is a work-around allowing your site to access files in multiple home directories. Please contact us if you need that special configuration set up for you and we will do so.
This announcement is intended as an advance warning for these upcoming changes. Please take the proper considerations to ensure your site experiences no down time. If you have any questions about this at all, please contact our support team.
Thanks guys
Steve
