Support both PHP 5 and 7, defaults to 5

1 files changed, 8 insertions, 0 deletions

diff --git a/manifests/series5/hardened.pp b/manifests/series5/hardened.pp
new file mode 100644
index 0000000..e512402
--- /dev/null
+++ b/manifests/series5/hardened.pp
@@ -0,0 +1,8 @@
+class php::series5::hardened {
+  php::config {
+    'allow_url_fopen'   : value => 'Off';
+    'allow_url_include' : value => 'Off';
+    'disable_functions' : value => 'phpinfo, system, exec, shell_exec, passthru, proc_get_status, proc_open, popen, proc_close, proc_nice, proc_terminate, pcntl_exec, proc_open, show_source, dl, symlink, system_exec';
+    #value => 'disable_functions = phpinfo, system, exec, shell_exec, passthru, proc_get_status, proc_open, popen, proc_close, proc_nice, proc_terminate, pcntl_exec, proc_open, curl_init, parse_ini_file, show_source, dl, symlink, syslog, mail, system_exec',
+  }
+}