This gist is about a sandbox plugin loader I made myself, it’s a simple one, just redefines the functions you forbid, so you can include the plugin code (better if you checkout the code first) and rest assured that the plugin can’t access other files, use it with open_basedir setted up
