Mastering changes in security functions and settings
Any changes to PHP security features are worth noting. Unfortunately, given the state of the world today, attacks on any web-facing code are a given. Accordingly, in this section, we address several changes to security-related PHP functions in PHP 8. The changed functions affected include the following:
assert()
password_hash()
crypt()
In addition, there was a change in how PHP 8 treats any functions defined in the php.ini
file using the disable_functions
directive. Let's have a look at this directive to begin with.
Understanding changes in disabled functions handling
Web hosting companies often offer heavily discounted shared hosting packages. Once a customer signs up, the IT staff at the hosting company creates an account on the shared server, assigns a disk quota to control disk space usage, and creates a virtual host definition on the web service. The problem such hosting companies face, however...