Unverified50% confidenceFactExact time
The disable_functions mechanism only acts at the PHP layer and cannot defend against attackers who use other language extensions or have already obtained higher privileges.
1
Sources
50%
Confidence
Long-term
Relevance
10/29/2026
First Seen
Sources
Related Entities
Related Claims
Unverifieddisable_functions can disable command execution functions such as exec, shell_exec, system, passthru, popen and proc_open in php.ini, reducing the risk of application-layer code being converted into system commands.61% similarUnverifiedPrompt injection cannot be fully filtered, only contained, because it is hidden instructions buried in the content an Agent reads, and the model treats them like user instructions.55% similarUnverifiedClosed-source API users can only control input and output, and cannot touch optimization switches inside the inference engine such as scheduling strategies, memory allocation and operator fusion.54% similarUnverifiedAdding a new operation requires only a new visitor class without modifying the node classes, in accordance with the open-closed principle.52% similarUnverifiedDevelopers should disable dangerous PHP functions such as exec, system, and passthru unless business needs require them.52% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1111095API
curl https://kongchang.com/api/v1/knowledge/claims/1111095MCP
get_claim(id=1111095)