From 149aed014ae44bdce9d41919451566047d4e18da Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 30 May 2024 07:36:52 +0200
Subject: [PATCH] system: disable dynamic loading of PHP modules

---
 src/etc/rc.subr.d/recover                              | 1 +
 src/opnsense/service/templates/OPNsense/WebGui/php.ini | 1 +
 2 files changed, 2 insertions(+)

diff --git a/src/etc/rc.subr.d/recover b/src/etc/rc.subr.d/recover
index 4c7f9fc68..6e1457104 100755
--- a/src/etc/rc.subr.d/recover
+++ b/src/etc/rc.subr.d/recover
@@ -186,6 +186,7 @@ $php_ini = <<<EOF
 ; File generated via recovery
 output_buffering = "0"
 expose_php = Off
+enable_dl = Off
 implicit_flush = true
 magic_quotes_gpc = Off
 max_execution_time = 900
diff --git a/src/opnsense/service/templates/OPNsense/WebGui/php.ini b/src/opnsense/service/templates/OPNsense/WebGui/php.ini
index 68649eff2..4eaa65a61 100644
--- a/src/opnsense/service/templates/OPNsense/WebGui/php.ini
+++ b/src/opnsense/service/templates/OPNsense/WebGui/php.ini
@@ -1,6 +1,7 @@
 ; File generated via configd
 output_buffering = "0"
 expose_php = Off
+enable_dl = Off
 implicit_flush = true
 magic_quotes_gpc = Off
 max_execution_time = 900