108
108
; Development Value: E_ALL
109
109
; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
110
110
111
- ; html_errors
112
- ; Default Value: On
113
- ; Development Value: On
114
- ; Production value: On
115
-
116
111
; log_errors
117
112
; Default Value: Off
118
113
; Development Value: On
@@ -289,6 +284,13 @@ implicit_flush = Off
289
284
; callback-function.
290
285
unserialize_callback_func =
291
286
287
+ ; The unserialize_max_depth specifies the default depth limit for unserialized
288
+ ; structures. Setting the depth limit too high may result in stack overflows
289
+ ; during unserialization. The unserialize_max_depth ini setting can be
290
+ ; overridden by the max_depth option on individual unserialize() calls.
291
+ ; A value of 0 disables the depth limit.
292
+ ; unserialize_max_depth = 4096
293
+
292
294
; When floats & doubles are serialized, store serialize_precision significant
293
295
; digits after the floating point. The default value ensures that when floats
294
296
; are decoded with unserialize, the data will remain the same.
@@ -300,15 +302,16 @@ serialize_precision = -1
300
302
; open_basedir, if set, limits all file operations to the defined directory
301
303
; and below. This directive makes most sense if used in a per-directory
302
304
; or per-virtualhost web server configuration file.
305
+ ; Note: disables the realpath cache
303
306
; http://php.net/open-basedir
304
307
; open_basedir =
305
308
306
- ; This directive allows you to disable certain functions for security reasons .
309
+ ; This directive allows you to disable certain functions.
307
310
; It receives a comma-delimited list of function names.
308
311
; http://php.net/disable-functions
309
312
disable_functions =
310
313
311
- ; This directive allows you to disable certain classes for security reasons .
314
+ ; This directive allows you to disable certain classes.
312
315
; It receives a comma-delimited list of class names.
313
316
; http://php.net/disable-classes
314
317
disable_classes =
@@ -332,6 +335,7 @@ disable_classes =
332
335
; Determines the size of the realpath cache to be used by PHP. This value should
333
336
; be increased on systems where PHP opens many files to reflect the quantity of
334
337
; the file operations performed.
338
+ ; Note: if open_basedir is set, the cache is disabled
335
339
; http://php.net/realpath-cache-size
336
340
; realpath_cache_size = 4096k
337
341
@@ -357,6 +361,10 @@ zend.enable_gc = On
357
361
; Default: ""
358
362
; zend.script_encoding =
359
363
364
+ ; Allows to include or exclude arguments from stack traces generated for exceptions
365
+ ; Default: Off
366
+ zend.exception_ignore_args = Off
367
+
360
368
; ;;;;;;;;;;;;;;;;
361
369
; Miscellaneous ;
362
370
; ;;;;;;;;;;;;;;;;
@@ -394,7 +402,7 @@ max_input_time = 60
394
402
; How many GET/POST/COOKIE input variables may be accepted
395
403
; max_input_vars = 1000
396
404
397
- ; Maximum amount of memory a script may consume (128MB)
405
+ ; Maximum amount of memory a script may consume
398
406
; http://php.net/memory-limit
399
407
memory_limit = 128M
400
408
@@ -509,7 +517,7 @@ ignore_repeated_errors = Off
509
517
ignore_repeated_source = Off
510
518
511
519
; If this parameter is set to Off, then memory leaks will not be shown (on
512
- ; stdout or in the log). This has only effect in a debug compile, and if
520
+ ; stdout or in the log). This is only effective in a debug compile, and if
513
521
; error reporting includes E_WARNING in the allowed list
514
522
; http://php.net/report-memleaks
515
523
report_memleaks = On
@@ -536,11 +544,8 @@ report_memleaks = On
536
544
; error message as HTML for easier reading. This directive controls whether
537
545
; the error message is formatted as HTML or not.
538
546
; Note: This directive is hardcoded to Off for the CLI SAPI
539
- ; Default Value: On
540
- ; Development Value: On
541
- ; Production value: On
542
547
; http://php.net/html-errors
543
- html_errors = On
548
+ ; html_errors = On
544
549
545
550
; If html_errors is set to On *and* docref_root is not empty, then PHP
546
551
; produces clickable error messages that direct to a page describing the error
@@ -591,9 +596,11 @@ html_errors = On
591
596
; control characters. If your logger accepts everything, then no filtering
592
597
; is needed at all.
593
598
; Allowed values are:
594
- ; ascii (only base ASCII characters)
595
- ; no_ctrl (all characters except control characters)
599
+ ; ascii (all printable ASCII characters and NL )
600
+ ; no-ctrl (all characters except control characters)
596
601
; all (all characters)
602
+ ; raw (like "all", but messages are not split at newlines)
603
+ ; http://php.net/syslog.filter
597
604
; syslog.filter = ascii
598
605
599
606
; windows.show_crt_warning
@@ -663,7 +670,7 @@ register_argc_argv = Off
663
670
; first used (Just In Time) instead of when the script starts. If these
664
671
; variables are not used within a script, having this directive on will result
665
672
; in a performance gain. The PHP directive register_argc_argv must be disabled
666
- ; for this directive to have any affect .
673
+ ; for this directive to have any effect .
667
674
; http://php.net/auto-globals-jit
668
675
auto_globals_jit = On
669
676
@@ -901,13 +908,14 @@ default_socket_timeout = 60
901
908
;
902
909
; extension=bz2
903
910
; extension=curl
911
+ ; extension=ffi
912
+ ; extension=ftp
904
913
; extension=fileinfo
905
914
; extension=gd2
906
915
; extension=gettext
907
916
; extension=gmp
908
917
; extension=intl
909
918
; extension=imap
910
- ; extension=interbase
911
919
; extension=ldap
912
920
; extension=mbstring
913
921
; extension=exif ; Must be after mbstring as it depends on it
@@ -986,6 +994,13 @@ cli_server.color = On
986
994
; otherwise output encoding conversion cannot be performed.
987
995
; iconv.output_encoding =
988
996
997
+ [imap]
998
+ ; rsh/ssh logins are disabled by default. Use this INI entry if you want to
999
+ ; enable them. Note that the IMAP library does not filter mailbox names before
1000
+ ; passing them to rsh/ssh command, thus passing untrusted data to this function
1001
+ ; with rsh/ssh enabled is insecure.
1002
+ ; imap.enable_insecure_rsh=0
1003
+
989
1004
[intl]
990
1005
; intl.default_locale =
991
1006
; This directive allows you to produce PHP errors when some error
@@ -995,8 +1010,19 @@ cli_server.color = On
995
1010
; intl.use_exceptions = 0
996
1011
997
1012
[sqlite3]
1013
+ ; Directory pointing to SQLite3 extensions
1014
+ ; http://php.net/sqlite3.extension-dir
998
1015
; sqlite3.extension_dir =
999
1016
1017
+ ; SQLite defensive mode flag (only available from SQLite 3.26+)
1018
+ ; When the defensive flag is enabled, language features that allow ordinary
1019
+ ; SQL to deliberately corrupt the database file are disabled. This forbids
1020
+ ; writing directly to the schema, shadow tables (eg. FTS data tables), or
1021
+ ; the sqlite_dbpage virtual table.
1022
+ ; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html
1023
+ ; (for older SQLite versions, this flag has no use)
1024
+ ; sqlite3.defensive = 1
1025
+
1000
1026
[Pcre]
1001
1027
; PCRE library backtracking limit.
1002
1028
; http://php.net/pcre.backtrack-limit
@@ -1104,37 +1130,6 @@ odbc.defaultlrl = 4096
1104
1130
; http://php.net/odbc.defaultbinmode
1105
1131
odbc.defaultbinmode = 1
1106
1132
1107
- [Interbase]
1108
- ; Allow or prevent persistent links.
1109
- ibase.allow_persistent = 1
1110
-
1111
- ; Maximum number of persistent links. -1 means no limit.
1112
- ibase.max_persistent = -1
1113
-
1114
- ; Maximum number of links (persistent + non-persistent). -1 means no limit.
1115
- ibase.max_links = -1
1116
-
1117
- ; Default database name for ibase_connect().
1118
- ; ibase.default_db =
1119
-
1120
- ; Default username for ibase_connect().
1121
- ; ibase.default_user =
1122
-
1123
- ; Default password for ibase_connect().
1124
- ; ibase.default_password =
1125
-
1126
- ; Default charset for ibase_connect().
1127
- ; ibase.default_charset =
1128
-
1129
- ; Default timestamp format.
1130
- ibase.timestampformat = " %Y-%m-%d %H:%M:%S"
1131
-
1132
- ; Default date format.
1133
- ibase.dateformat = " %Y-%m-%d"
1134
-
1135
- ; Default time format.
1136
- ibase.timeformat = " %H:%M:%S"
1137
-
1138
1133
[MySQLi]
1139
1134
1140
1135
; Maximum number of persistent links. -1 means no limit.
@@ -1165,11 +1160,11 @@ mysqli.default_port = 3306
1165
1160
; http://php.net/mysqli.default-socket
1166
1161
mysqli.default_socket =
1167
1162
1168
- ; Default host for mysql_connect () (doesn't apply in safe mode).
1163
+ ; Default host for mysqli_connect () (doesn't apply in safe mode).
1169
1164
; http://php.net/mysqli.default-host
1170
1165
mysqli.default_host =
1171
1166
1172
- ; Default user for mysql_connect () (doesn't apply in safe mode).
1167
+ ; Default user for mysqli_connect () (doesn't apply in safe mode).
1173
1168
; http://php.net/mysqli.default-user
1174
1169
mysqli.default_user =
1175
1170
@@ -1391,34 +1386,28 @@ session.cookie_domain =
1391
1386
session.cookie_httponly =
1392
1387
1393
1388
; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF)
1394
- ; Current valid values are "Lax" or "Strict"
1389
+ ; Current valid values are "Strict", "Lax" or "None". When using "None",
1390
+ ; make sure to include the quotes, as `none` is interpreted like `false` in ini files.
1395
1391
; https://tools.ietf.org/html/draft-west-first-party-cookies-07
1396
1392
session.cookie_samesite =
1397
1393
1398
1394
; Handler used to serialize data. php is the standard serializer of PHP.
1399
1395
; http://php.net/session.serialize-handler
1400
1396
session.serialize_handler = php
1401
1397
1402
- ; Defines the probability that the 'garbage collection' process is started
1403
- ; on every session initialization. The probability is calculated by using
1404
- ; gc_probability/gc_divisor. Where session.gc_probability is the numerator
1405
- ; and gc_divisor is the denominator in the equation. Setting this value to 1
1406
- ; when the session.gc_divisor value is 100 will give you approximately a 1% chance
1407
- ; the gc will run on any given request.
1398
+ ; Defines the probability that the 'garbage collection' process is started on every
1399
+ ; session initialization. The probability is calculated by using gc_probability/gc_divisor,
1400
+ ; e.g. 1/100 means there is a 1% chance that the GC process starts on each request.
1408
1401
; Default Value: 1
1409
1402
; Development Value: 1
1410
1403
; Production Value: 1
1411
1404
; http://php.net/session.gc-probability
1412
1405
session.gc_probability = 1
1413
1406
1414
1407
; Defines the probability that the 'garbage collection' process is started on every
1415
- ; session initialization. The probability is calculated by using the following equation:
1416
- ; gc_probability/gc_divisor. Where session.gc_probability is the numerator and
1417
- ; session.gc_divisor is the denominator in the equation. Setting this value to 100
1418
- ; when the session.gc_probability value is 1 will give you approximately a 1% chance
1419
- ; the gc will run on any given request. Increasing this value to 1000 will give you
1420
- ; a 0.1% chance the gc will run on any given request. For high volume production servers,
1421
- ; this is a more efficient approach.
1408
+ ; session initialization. The probability is calculated by using gc_probability/gc_divisor,
1409
+ ; e.g. 1/100 means there is a 1% chance that the GC process starts on each request.
1410
+ ; For high volume production servers, using a value of 1000 is a more efficient approach.
1422
1411
; Default Value: 100
1423
1412
; Development Value: 1000
1424
1413
; Production Value: 1000
@@ -1434,8 +1423,8 @@ session.gc_maxlifetime = 1440
1434
1423
; (see session.save_path above), then garbage collection does *not*
1435
1424
; happen automatically. You will need to do your own garbage
1436
1425
; collection through a shell script, cron entry, or some other method.
1437
- ; For example, the following script would is the equivalent of
1438
- ; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
1426
+ ; For example, the following script is the equivalent of setting
1427
+ ; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
1439
1428
; find /path/to/sessions -cmin +24 -type f | xargs rm
1440
1429
1441
1430
; Check HTTP Referer to invalidate externally stored URLs containing ids.
@@ -1597,6 +1586,8 @@ zend.assertions = 1
1597
1586
; http://php.net/assert.quiet-eval
1598
1587
; assert.quiet_eval = 0
1599
1588
1589
+
1590
+
1600
1591
[COM]
1601
1592
; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
1602
1593
; http://php.net/com.typelib-file
@@ -1691,6 +1682,16 @@ zend.assertions = 1
1691
1682
; Default: mbstring.http_output_conv_mimetype=^(text/|application/xhtml\+xml)
1692
1683
; mbstring.http_output_conv_mimetype=
1693
1684
1685
+ ; This directive specifies maximum stack depth for mbstring regular expressions. It is similar
1686
+ ; to the pcre.recursion_limit for PCRE.
1687
+ ; Default: 100000
1688
+ ; mbstring.regex_stack_limit=100000
1689
+
1690
+ ; This directive specifies maximum retry count for mbstring regular expressions. It is similar
1691
+ ; to the pcre.backtrack_limit for PCRE.
1692
+ ; Default: 1000000
1693
+ ; mbstring.regex_retry_limit=1000000
1694
+
1694
1695
[gd]
1695
1696
; Tell the jpeg decode to ignore warnings and try to create
1696
1697
; a gd image. The warning will then be displayed as notices
@@ -1858,6 +1859,10 @@ ldap.max_links = -1
1858
1859
; errors.
1859
1860
; opcache.mmap_base=
1860
1861
1862
+ ; Facilitates multiple OPcache instances per user (for Windows only). All PHP
1863
+ ; processes with the same cache ID and user share an OPcache instance.
1864
+ ; opcache.cache_id=
1865
+
1861
1866
; Enables and sets the second level cache directory.
1862
1867
; It should improve performance when SHM memory is full, at server restart or
1863
1868
; SHM reset. The default "" disables file based caching.
@@ -1888,6 +1893,24 @@ ldap.max_links = -1
1888
1893
; optimizations.
1889
1894
; opcache.opt_debug_level=0
1890
1895
1896
+ ; Specifies a PHP script that is going to be compiled and executed at server
1897
+ ; start-up.
1898
+ ; http://php.net/opcache.preload
1899
+ ; opcache.preload=
1900
+
1901
+ ; Preloading code as root is not allowed for security reasons. This directive
1902
+ ; facilitates to let the preloading to be run as another user.
1903
+ ; http://php.net/opcache.preload_user
1904
+ ; opcache.preload_user=
1905
+
1906
+ ; Prevents caching files that are less than this number of seconds old. It
1907
+ ; protects from caching of incompletely updated files. In case all file updates
1908
+ ; on your site are atomic, you may increase performance by setting it to "0".
1909
+ ; opcache.file_update_protection=2
1910
+
1911
+ ; Absolute path used to store shared lockfiles (for *nix only).
1912
+ ; opcache.lockfile_path=/tmp
1913
+
1891
1914
[curl]
1892
1915
; A default value for the CURLOPT_CAINFO option. This is required to be an
1893
1916
; absolute path.
@@ -1911,6 +1934,12 @@ ldap.max_links = -1
1911
1934
; SSL stream context option.
1912
1935
; openssl.capath=
1913
1936
1914
- ; Local Variables:
1915
- ; tab-width: 4
1916
- ; End:
1937
+ [ffi]
1938
+ ; FFI API restriction. Possible values:
1939
+ ; "preload" - enabled in CLI scripts and preloaded files (default)
1940
+ ; "false" - always disabled
1941
+ ; "true" - always enabled
1942
+ ; ffi.enable=preload
1943
+
1944
+ ; List of headers files to preload, wildcard patterns allowed.
1945
+ ; ffi.preload=
0 commit comments