{"id":222,"date":"2013-07-20T09:40:37","date_gmt":"2014-07-20T06:40:37","guid":{"rendered":"https:\/\/furkansandal.com\/?p=222"},"modified":"2014-07-20T14:55:17","modified_gmt":"2014-07-20T11:55:17","slug":"php-ini-ile-guvenligi-saglama","status":"publish","type":"post","link":"https:\/\/furkansandal.com\/php-ini-ile-guvenligi-saglama\/","title":{"rendered":"php.ini ile G\u00fcvenli\u011fi Sa\u011flama"},"content":{"rendered":"<div class=\"post\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_55 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title \" >Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\" role=\"button\"><label for=\"item-662e1715cefea\" ><span class=\"\"><span style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input aria-label=\"Toggle\" aria-label=\"item-662e1715cefea\"  type=\"checkbox\" id=\"item-662e1715cefea\"><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/furkansandal.com\/php-ini-ile-guvenligi-saglama\/#phpini_ile_Guvenligi_Saglama\" title=\"php.ini ile G\u00fcvenli\u011fi Sa\u011flama\">php.ini ile G\u00fcvenli\u011fi Sa\u011flama<\/a><ul class='ez-toc-list-level-2'><li class='ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/furkansandal.com\/php-ini-ile-guvenligi-saglama\/#wwwoldfurkansandalcom\" title=\"www.old.furkansandal.com\">www.old.furkansandal.com<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h1 style=\"text-align: center;\"><span class=\"ez-toc-section\" id=\"phpini_ile_Guvenligi_Saglama\"><\/span><span style=\"color: #3366ff;\">php.ini ile G\u00fcvenli\u011fi Sa\u011flama<\/span><span class=\"ez-toc-section-end\"><\/span><\/h1>\n<hr \/>\n<h1 style=\"text-align: center;\"><\/h1>\n<p>Sunucumuza Ba\u011flan\u0131p <span style=\"color: #ff0000;\"><strong>php.ini <\/strong><\/span>\u00fczerinden sunucumuzda kullan\u0131ma kapataca\u011f\u0131m\u0131z fonksiyonlar\u0131 belirtece\u011fiz.<\/p>\n<p>Putty yada PenguiNet ile sunucumuza ba\u011fland\u0131ktan sonra <span style=\"color: #ff0000;\"><strong>cd \/usr\/local\/lib\/ <\/strong><\/span>yaz\u0131p ilgili dizine giriyoruz. Girdikten sonra <span style=\"color: #ff0000;\"><strong>vi php.ini<\/strong><\/span> yaz\u0131p dosyam\u0131z\u0131 a\u00e7\u0131yoruz ve i\u00e7erisinde a\u015fa\u011f\u0131ya do\u011fru inip ayarlar\u0131 uyguluyoruz.<\/p>\n<p><strong><span style=\"color: #00ff00;\">Safe mode =<\/span> <\/strong><span style=\"color: #ff0000;\"><strong>On<\/strong><\/span> olarak ayarlay\u0131n<\/p>\n<p>Sonra<span style=\"color: #ff0000;\"> <strong>disable_function<\/strong><\/span> yazan sat\u0131r\u0131 bulup a\u015fa\u011f\u0131daki fonksiyonlar\u0131 ekliyoruz.<\/p>\n<pre lang=\"html\">disable_functions = system, shell_exec, exec, passthru, pcntl_exec, proc_open, proc_close, proc_get_status, proc_nice, proc_terminate, openlog, escapeshellcmd, escapeshellarg, dl,show_source<\/pre>\n<p><strong><span style=\"color: #ff0000;\"> system<\/span> =&gt;<\/strong> Sunucu sistemini birebir ilgilendiren ve sunucu aktivitelerini takip etmemizi sa\u011flayan sistem dosyalar\u0131n\u0131n g\u00f6r\u00fcnt\u00fclenmesi, \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131 gibi etkinliklerini sa\u011flar<\/p>\n<p><strong><span style=\"color: #ff0000;\"> shell_exec<\/span> =&gt;<\/strong> Shell yetkimiz varm\u0131\u015f gibi i\u015flem yapabilmesini sa\u011flar. Bu \u015fekilde bir \u00e7ok dizinin g\u00f6r\u00fcnt\u00fclenmesi ve dizinler \u00fczerinde i\u015flem yap\u0131lmas\u0131na olanak sa\u011flar.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> passthru<\/span> =&gt;<\/strong> Gerek d\u0131\u015f bir sunucuda gerekse sunucu i\u00e7inde bulunan programlar\u0131(komut sat\u0131rlar\u0131n\u0131) de\u011ferlendirip i\u015fleme koyar. shell_exec ve exec \u00f6zellikleri ile hemen hemen ayn\u0131 g\u00f6revleri yapmaktad\u0131rlar.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> pcntl_exec<\/span> =&gt;<\/strong> Sistem k\u00fct\u00fcphanelerini kullanarak (\/usr\/local\/bin\/perl gibi) istenilen kodlar\u0131n \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 sa\u011flar. Bu \u015fekilde sistem \u00fczerinden bir \u00e7ok kod hi\u00e7 bir yere tak\u0131lmadan \u00e7al\u0131\u015ft\u0131r\u0131labilir.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> proc_open<\/span>=&gt; <\/strong>i\u015faret edilen dosyalardaki kodlar\u0131 ve ba\u011f\u0131ms\u0131z kodlar\u0131 \u00e7al\u0131\u015ft\u0131rmaya yarar. popen fonksiyonunun biraz daha geni\u015f kapsaml\u0131s\u0131d\u0131r.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> proc_close<\/span> =&gt;<\/strong> proc_open fonksiyonu ile a\u00e7\u0131lan i\u015flemleri sonland\u0131rmaya yarar.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> proc_get_status<\/span> =&gt;<\/strong> proc_open fonksiyonu ile ba\u015flat\u0131lan i\u015flemin durumunu takip etmek i\u00e7in kullan\u0131l\u0131r.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> proc_nice<\/span> =&gt;<\/strong> aktif olarak y\u00fcr\u00fct\u00fclen i\u015flemin \u00f6nceli\u011fini de\u011fi\u015ftirmenize olanak sa\u011flar.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> proc_terminate<\/span> =&gt;<\/strong> proc_open ile ba\u015flat\u0131lan i\u015flem s\u00fcrecini sonland\u0131rmaya yarar.<\/p>\n<p><strong><span style=\"color: #ff0000;\"> open_log<\/span> =&gt;<\/strong> Bir program(kod par\u00e7alar\u0131,scriptler) i\u00e7in sistemde kay\u0131t dosyalar\u0131n\u0131 saklamalar\u0131n\u0131 sa\u011flamak i\u00e7in ba\u011flant\u0131 kurar<\/p>\n<p><strong><span style=\"color: #ff0000;\"> dl<\/span> =&gt;<\/strong> PHP K\u00fct\u00fcphanesindeki eklentilerin aktif olarak kullan\u0131lmas\u0131n\u0131 sa\u011flar.<\/p>\n<p>Bir \u00e7ok arkada\u015f\u0131n \u00f6nerdi\u011fi fakat benim anlam\u0131n\u0131 bilmediklerim. Bazi disable funksiyonlar\u0131 da var ama ilk etapta serverinizi yeteri kadar guvenli hale getirmeye yetecektir.<\/p>\n<p>Devam\u0131n\u0131da tekrardan<strong><span style=\"color: #00ffff;\"><a href=\"www.old.furkansandal.com\"><span style=\"color: #00ffff;\"> www.old.furkansandal.com<\/span><\/a><\/span><\/strong>&#8216;da payla\u015faca\u011f\u0131m<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: center;\"><span class=\"ez-toc-section\" id=\"wwwoldfurkansandalcom\"><\/span><span style=\"color: #339966;\"><a href=\"www.old.furkansandal.com\"><span style=\"color: #339966;\">www.old.furkansandal.com<\/span><\/a><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<hr \/>\n<h2 style=\"text-align: center;\"><\/h2>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>php.ini ile G\u00fcvenli\u011fi Sa\u011flama Sunucumuza Ba\u011flan\u0131p php.ini \u00fczerinden sunucumuzda kullan\u0131ma kapataca\u011f\u0131m\u0131z fonksiyonlar\u0131 belirtece\u011fiz. Putty yada PenguiNet ile sunucumuza ba\u011fland\u0131ktan sonra&#8230;<\/p>\n","protected":false},"author":1,"featured_media":167,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","footnotes":""},"categories":[6,9],"tags":[],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/furkansandal.com\/wp-content\/uploads\/2014\/07\/fiziksel_guvenlik.jpg?fit=227%2C226&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6BM7I-3A","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts\/222"}],"collection":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/comments?post=222"}],"version-history":[{"count":0,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/posts\/222\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/media\/167"}],"wp:attachment":[{"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/media?parent=222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/categories?post=222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/furkansandal.com\/wp-json\/wp\/v2\/tags?post=222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}