We are working on a PHP component that requires
proc_open() for it to work. Because of this, we have trouble running on common shared hosts because
proc_open() together with other functions like
passthru() and similar are usually disabled.
I am not a sysadmin but what I find interesting is that some hosts actually leave these functions enabled, and I wouldn't say they are amateurish, quite to the contrary from my experience. So the question is:
Is it possible to make a shared hosting secure with functions like proc_open() enabled? If so, what's the secret sauce? How can they afford it without risking one user on their servers doing something malicious with the other users' data?