How to Enable PHP functions like exec(), proc_open() and system()
To secure and protect websites on our hosting platform, certain PHP functions cannot be enabled on Shared Hosting. More information is provided below.A small number of PHP functions, including exec() proc_open() and system() are disabled on our Economy, Business, Stealth and Reseller hosting servers. As these are shared hosting servers, they contain multiple cPanel accounts and clients on each server. To maintain the security of our clients, their emails and websites (almost all of which are businesses) we have to maintain a strict security policy and aren't able to enable them for any individual users or cPanel accounts.
The list of disabled functions is based on up-to-date security recommendations by the cPanel company. Almost all hosting companies which use cPanel will have a similar security protocol in this regard.
PHP is regarded as the most insecure technology on the internet,which makes it dangerous, especially as most websites are built using PHP. Web builders like WordPress, Joomla, Magento and most others are essentially applications made using PHP.
You can see how often a new PHP hack/exploit is discovered here (at least 1 each month) by checking this link.
The functions are most commonly used by minor plugins and themes for WordPress, Joomla or other Content Management Systems. The best option in this case would be to look for an alternate plugin or theme which doesn't have this requirement. If you absolutely require the use of disabled PHP functions, you will need to consider moving your website to a VPS or Dedicated Server where your website would have its own dedicated environment. This removes the security risk to others on our servers, although the risk to your website still remains.
Our partner company offers VPS and Dedicated Server products which can be found here:
VPS: digitalpacific.com.au/vps/managed-vps
Dedicated Server: digitalpacific.com.au/dedicated/dedicated-servers