apache - How to disable use of special php functions on a subdirectory wih suhosin extencion? -

i have website using concrete5.

i need allow cliente access subpage domain\blocks.

the problem if person permissions create block , put code like:

file_get_contents('c:\xampp\htdocs\somefile.php');

he source code the website.

i trying use suhosin exctension block functions:

in php.ini

suhosin.executor.func.blacklist = ""

in httpd-xampp.conf

<directory "c:/xampp/htdocs/blocks">      php_admin_value suhosin.executor.func.blacklist "opendir, file_get_contents, phpinfo" </directory>

the problem not working. since concrete5 use index.php manage url connections.

basicly when call url: www.domain.com/somepage/title; example, called is:

c:/xampp/htdocs/index.php/somepage/title

then concrete5 translate cms , eventualy calls block code.

since call root of domain, have access php functions.

i want protect rest of website.

Bready