Fix: proc_open() Has Been Disabled for Security Reasons

The error proc_open() has been disabled for security reasons occurs when the proc_open function is disabled in PHP for security reasons. Some hosting providers disable it to prevent command execution vulnerabilities.

For closely related "PHP function disabled" topics, see Fix shell_exec() Has Been Disabled and assert_quiet_eval in PHP — Explanation & Troubleshooting.

What is the proc_open() Error

The proc_open() function is used to execute external processes from PHP scripts. It may be disabled by hosting providers in the following cases:

• Shared hosting for enhanced security
• Servers with strict security policies
• Preventing arbitrary command execution

Check if proc_open Is Disabled

Execute this command to see disabled PHP functions:

php -r "echo ini_get('disable_functions');"

Expected output (if proc_open is disabled):

exec,passthru,shell_exec,proc_open,system

If proc_open appears in the list, it means PHP is blocking this function.

Enable proc_open() in php.ini

1. Find the php.ini File

Execute the command:

php --ini | grep "Loaded Configuration File"

Example output:

Loaded Configuration File: /etc/php/8.1/cli/php.ini

The path to your php.ini file may differ depending on the server configuration.

2. Edit php.ini

Open the file in a text editor:

sudo nano /etc/php/8.1/cli/php.ini

Find this line:

disable_functions = exec,passthru,shell_exec,proc_open,system

Remove proc_open and proc_close if they are listed:

disable_functions = exec,passthru,shell_exec,system

Save and exit (CTRL + X, then Y, then Enter).

3. Restart Apache or PHP-FPM

For Apache:

sudo systemctl restart apache2

For Nginx with PHP-FPM:

sudo systemctl restart php8.1-fpm

    sudo systemctl restart nginx

Now proc_open() should work!

Verify That proc_open() Is Enabled

Execute:

php -r "echo ini_get('disable_functions');"

Expected output (if proc_open is enabled):

exec,passthru,shell_exec,system

If proc_open is absent from the list, it's enabled!

Alternative: Enable proc_open() in .user.ini (Shared Hosting)

If you don't have root access, try adding this to the .user.ini file in the root folder of your site:

disable_functions =

This will override the default server settings (if your hosting provider allows it).

Troubleshooting