Skip to content
vetkitChecksChangelogDocumentation

vetkit.php.ini.enable-dl

PHP enable_dl is enabled, which lets scripts load arbitrary native extensions at runtime with dl() and bypass other restrictions.

Last updated:

Suite: Security

regex

PHP enable_dl is enabled, which lets scripts load arbitrary native extensions at runtime with dl() and bypass other restrictions.

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Set enable_dl = Off and load required extensions from php.ini only.

References

Source: packages/engine/rules/sast/config.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.