What is the scope of the ini_set, putenv, and other functions? is it global or limited to this website? The official website shows that the changes made to these two functions are valid during script execution.
However, this modification is effective for the website or globally. If it is globally valid, can these functions be used to modify the default global PHP security settings, resulting in security problems.
Does anyone know the scope of its function, or how it can be tested?
Is it necessary to disable them in disable_functions? are there many normal website programs that use them?
Reply to discussion (solution)
Ini_set when the current script runs, the script stops running
Putenv will survive when the current session request ends.
Is the modification scope valid only for this website?
It is only valid for a single run, just like the constant you set
