{"id":13757,"date":"2026-07-27T08:57:53","date_gmt":"2026-07-27T08:57:53","guid":{"rendered":"https:\/\/www.hostinger.com\/support\/?p=13757"},"modified":"2026-08-05T03:08:00","modified_gmt":"2026-08-05T03:08:00","slug":"which-php-extensions-and-configuration-options-are-supported-at-hostinger","status":"publish","type":"post","link":"https:\/\/www.hostinger.com\/support\/which-php-extensions-and-configuration-options-are-supported-at-hostinger\/","title":{"rendered":"Which PHP extensions and configuration options are supported at Hostinger"},"content":{"rendered":"<p>Most PHP extensions and configuration options at Hostinger are enabled by default on Web and Cloud hosting plans, with a couple of security-sensitive exceptions you can turn on manually when needed. SimpleXML, PHP SOAP, MCrypt, Zend OPcache, ionCube, and allow_url_fopen all fall into the &ldquo;on by default&rdquo; group, while dl() is off by default for security reasons and the legacy magic_quotes_gpc directive needs to be disabled through .htaccess. Each is covered individually below. For the specific resource limits of each plan type, see <a href=\"https:\/\/www.hostinger.com\/support\/6976044-parameters-and-limits-of-hosting-plans-in-hostinger\/\">parameters and limits of hosting plans in Hostinger.<\/a><\/p><h2 id=\"h-is-simplexml-supported-at-hostinger\">Is SimpleXML supported at Hostinger?<\/h2><p>SimpleXML is a PHP extension that offers a user-friendly approach to handling XML data in PHP, eliminating the need for manual XML parsing or reliance on more intricate DOM (Document Object Model) methods. It does this by establishing a tree-based interface that makes it easier to access and modify XML elements, attributes, and nodes.<\/p><p>SimpleXML is <strong>enabled by default<\/strong> on all <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a> <\/strong>hosting plans. You can check it in the <strong><a href=\"https:\/\/www.hostinger.com\/support\/4667515-how-to-manage-php-extensions-and-options\/\">PHP Configuration<\/a><\/strong> section of hPanel.<\/p><h2 id=\"h-is-php-soap-enabled-at-hostinger\">Is PHP SOAP enabled at Hostinger?<\/h2><p>PHP SOAP (Simple Object Access Protocol) is a protocol used to exchange information using XML, allowing programs running on different operating systems and platforms to communicate with each other smoothly.<\/p><p>SOAP is <strong>supported<\/strong> on all <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a> <\/strong>hosting plans and is enabled by default in the PHP configuration. This setting can be changed at any time through <strong><a href=\"https:\/\/www.hostinger.com\/support\/4667515-how-to-manage-php-extensions-and-options\/\">PHP Configuration<\/a><\/strong> in hPanel.<\/p><h2 id=\"h-is-dl-enabled-at-hostinger\">Is dl() enabled at Hostinger?<\/h2><p>The <b><code>dl()<\/code><\/b> function in PHP is used to <b>dynamically load<\/b> a PHP extension at runtime within a script, allowing the inclusion of a shared library or extension file that extends PHP functionality.<\/p><p>Since <b><code>dl()<\/code><\/b> can potentially load arbitrary or malicious code, it&rsquo;s <strong>disabled<\/strong> by default on <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a> <\/strong>hosting plans. If needed, it can be <strong><a href=\"https:\/\/www.hostinger.com\/support\/3212034-how-to-enable-disabled-php-functions-in-hostinger\/\">enabled manually<\/a><\/strong> from hPanel.<\/p><p class=\"no-margin\">We recommend considering the following precautions:<\/p><ul>\n<li>\n<p class=\"no-margin\">Ensure you&rsquo;re using the <b>latest PHP version<\/b> available<\/p>\n<\/li>\n<li>\n<p class=\"no-margin\">Implement strict <b>input validation and sanitization<\/b> measures to safeguard against potential security threats<\/p>\n<\/li>\n<li>\n<p class=\"no-margin\">Limit the use of <b><code>dl()<\/code><\/b> exclusively to <b>specific directories or scripts<\/b> that require dynamic loading of extensions<\/p>\n<\/li>\n<\/ul><p class=\"no-margin\">While these precautions can help reduce the risks associated with using <b><code>dl()<\/code><\/b>, it&rsquo;s generally advisable to avoid its usage and, if possible, seek <b>alternative solutions<\/b> to maintain a more secure hosting environment.<\/p><h2 id=\"h-is-mcrypt-supported-at-hostinger\">Is Mcrypt supported at Hostinger?<\/h2><p>Yes, MCrypt is <strong>supported<\/strong>. Keep in mind that MCrypt was deprecated in PHP v7.1 and is no longer supported in PHP v7.2 and later versions. You can still use the MCrypt module in <b><a class=\"intercom-content-link\" href=\"https:\/\/support.hostinger.com\/php\/how-can-i-change-my-php-version\" target=\"_blank\" rel=\"noopener\">older PHP versions<\/a>.<\/b><\/p><h2 id=\"h-are-zend-opcache-and-ioncube-supported-at-hostinger\">Are Zend OPcache and ionCube supported at Hostinger?<\/h2><p>Zend OPcache (formerly Zend Optimizer) and ionCube Loader are <strong>pre-installed<\/strong> on all <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a> <\/strong>hosting plans at Hostinger, but they need to be enabled per website by <a href=\"https:\/\/www.hostinger.com\/support\/4667515-how-to-manage-php-extensions-and-options-in-hostinger\/\"><strong>enabling the PHP extension<\/strong><\/a>.<\/p><div class=\"intercom-interblocks-callout\" style=\"background-color: #e3e7fa80;border-color: #334bfa33\">IonCube is <strong>not available<\/strong> for PHP version 8, however, it&rsquo;s available for version 8.1 and above.<\/div><h2 id=\"h-is-allow_url_fopen-enabled-at-hostinger\">Is allow_url_fopen enabled at Hostinger?<\/h2><p>The `allow_url_fopen` PHP function is<strong> enabled by default<\/strong> on all <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a> <\/strong>hosting plans.<\/p><h2 id=\"h-can-the-magic_quotes_gpc-directive-be-disabled-at-hostinger\">Can the magic_quotes_gpc directive be disabled at Hostinger?<\/h2><p>Yes. The legacy magic_quotes_gpc directive <strong>can be disabled<\/strong> by adding a line to <a href=\"https:\/\/www.hostinger.com\/support\/1583307-how-to-create-an-htaccess-file\/\">the .htaccess file<\/a> in the directory where you want it disabled.<\/p><ol>\n<li>Open the .htaccess file <a href=\"https:\/\/www.hostinger.com\/support\/7949267-how-to-use-the-file-editor-at-hostinger\/\">using the File Editor<\/a>. If the file doesn&rsquo;t exist in the public_html folder of your website, <a href=\"https:\/\/www.hostinger.com\/support\/1583307-how-to-create-an-htaccess-file\/\">create it<\/a>.<\/li>\n<li>Add the following line:<br>\nphp_flag magic_quotes_gpc off<\/li>\n<li>Click <strong>Save<\/strong> to apply the changes.<\/li>\n<\/ol><h2 id=\"h-is-the-php-ini-file-accessible-at-hostinger\">Is the php.ini file accessible at Hostinger?<\/h2><p>Due to the hosting environment architecture of <a href=\"https:\/\/www.hostinger.com\/web-hosting\"><strong>Web<\/strong> <\/a>and <strong><a href=\"https:\/\/www.hostinger.com\/cloud-hosting\">Cloud<\/a><\/strong> hosting plans, direct access to the php.ini file is <strong>disabled<\/strong>.<\/p><p>Instead, you can modify settings such as memory_limit, error_reporting, and maximum file upload sizes through the <a href=\"https:\/\/www.hostinger.com\/support\/4622479-how-to-change-values-of-php-parameters\/\">PHP Options<\/a> section of hPanel, or by adding php_flag directives to your <a href=\"https:\/\/www.hostinger.com\/support\/4622356-how-to-increase-upload-max-filesize-and-php-values-via-htaccess\/\">.htaccess file<\/a>.<\/p><p>If you need full access to the php.ini file and all its settings, VPS Hosting is the best option, since it&rsquo;s a self-managed solution with full control over server configuration.<\/p><h2 id=\"h-can-modsecurity-be-disabled-at-hostinger\">Can ModSecurity be disabled at Hostinger?<\/h2><p>ModSecurity is an open-source web application firewall (WAF) that protects websites from threats such as SQL injection and cross-site scripting. It&rsquo;s <strong>enabled by default<\/strong> at Hostinger, and we recommend keeping it enabled &mdash; but you may need to disable it in some cases, such as fixing compatibility issues with a script, plugin, or widget.<\/p><ol>\n<li>Open the <a href=\"https:\/\/www.hostinger.com\/support\/1583307-how-to-create-an-htaccess-file\/\">.htaccess file<\/a> of your website using the <a href=\"https:\/\/www.hostinger.com\/support\/4548688-basic-actions-in-the-file-manager\/\">File Manager,<\/a> or create one if it doesn&rsquo;t exist.<\/li>\n<li>Add the following lines:<br>\nSecFilterEngine Off<br>\nSecFilterScanPOST Off<\/li>\n<li>Save the changes. ModSecurity will now be disabled for your website.<\/li>\n<\/ol><p>Most PHP extensions and settings covered here are already enabled by default on Web and Cloud hosting plans, with configuration handled through PHP Configuration in hPanel. The main exceptions are dl(), which is off by default for security and needs to be enabled manually, and magic_quotes_gpc, a legacy directive managed through .htaccess rather than the PHP Configuration panel. ModSecurity is enabled by default and can be disabled through .htaccess if needed, while the php.ini file itself isn&rsquo;t directly accessible on Web and Cloud plans &mdash; VPS Hosting is required for full access.<\/p><p><strong>Additional resources<\/strong><\/p><ul>\n<li><a href=\"https:\/\/www.php.net\/manual\/en\/book.simplexml.php\" target=\"_blank\" rel=\"noopener\">PHP SimpleXML documentation<\/a><\/li>\n<li><a href=\"https:\/\/www.php.net\/manual\/en\/book.soap.php\" target=\"_blank\" rel=\"noopener\">PHP SOAP documentation<\/a><\/li>\n<li><a href=\"https:\/\/www.php.net\/manual\/en\/function.dl.php\" target=\"_blank\" rel=\"noopener\">PHP dl() documentation<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Learn which PHP extensions and configuration options Hostinger web and cloud hosting plans support.<\/p>\n","protected":false},"author":594,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"include_on_kodee":true,"footnotes":""},"categories":[218],"tags":[],"class_list":["post-13757","post","type-post","status-publish","format-standard","hentry","category-supported-technologies-and-functions"],"hreflangs":[],"include_on_kodee":true,"_links":{"self":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts\/13757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/users\/594"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/comments?post=13757"}],"version-history":[{"count":5,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts\/13757\/revisions"}],"predecessor-version":[{"id":14308,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts\/13757\/revisions\/14308"}],"wp:attachment":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/media?parent=13757"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/categories?post=13757"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/tags?post=13757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}