dominikshaim

We don’t use this plugin longer time ?? From 2022. So I can’t test it. I am only reporting old problem for you for future improvement ??
I checked this PR, commits looks good on first look ??

• This reply was modified 3 weeks, 6 days ago by dominikshaim.

We dont use apache_request_headers function. We block this function.

is_callable will solve problem I think ??

@donncha: OK ??

Difference is:
function_exists = checking if function exists but not if is possible to call it (because disabled_functions for example)
is_callable = this is checking if function is able to be called, return false, if function is in disabled_functions ??
I think, it will be better option to “switch” from function_exists to is_callable.

OK, well, thank you for solution. ??

Hi,

thank you for prompt reply. Because this function (getallheaders) is listed on websites about php security, for example:
https://www.vennedey.net/resources/3-Secure-webspaces-with-NGINX-PHP-FPM-chroots-and-Lets-Encrypt

So, it is incorrect information?

Thank you.

So, no solution?