Added php option for disable_functions

* Added php_disable_functions variable
* Updated php.ini template

README.md

@@ -85,6 +85,7 @@ By default, all the extra defaults below are applied through the php.ini include
     php_session_gc_maxlifetime: 1440
     php_session_save_handler: files
     php_session_save_path: ''
+    php_disable_functions: []
 
 Various defaults for PHP. Only used if `php_use_managed_ini` is set to `true`.
 

defaults/main.yml

@@ -58,6 +58,7 @@ php_allow_url_fopen: "On"
 php_sendmail_path: "/usr/sbin/sendmail -t -i"
 php_output_buffering: "4096"
 php_short_open_tag: false
+php_disable_functions: []
 
 php_session_cookie_lifetime: 0
 php_session_gc_probability: 1

templates/php.ini.j2

@@ -15,7 +15,7 @@ zlib.output_compression = Off
 implicit_flush = Off
 unserialize_callback_func =
 serialize_precision = 17
-disable_functions =
+disable_functions = {{ php_disable_functions|join(",") }}
 disable_classes =
 
 zend.enable_gc = On