xref: /PHP-8.2/php.ini-development (revision a4d64b26)
1[PHP]
2
3;;;;;;;;;;;;;;;;;;;
4; About php.ini   ;
5;;;;;;;;;;;;;;;;;;;
6; PHP's initialization file, generally called php.ini, is responsible for
7; configuring many of the aspects of PHP's behavior.
8
9; PHP attempts to find and load this configuration from a number of locations.
10; The following is a summary of its search order:
11; 1. SAPI module specific location.
12; 2. The PHPRC environment variable.
13; 3. A number of predefined registry keys on Windows
14; 4. Current working directory (except CLI)
15; 5. The web server's directory (for SAPI modules), or directory of PHP
16; (otherwise in Windows)
17; 6. The directory from the --with-config-file-path compile time option, or the
18; Windows directory (usually C:\windows)
19; See the PHP docs for more specific information.
20; https://php.net/configuration.file
21
22; The syntax of the file is extremely simple.  Whitespace and lines
23; beginning with a semicolon are silently ignored (as you probably guessed).
24; Section headers (e.g. [Foo]) are also silently ignored, even though
25; they might mean something in the future.
26
27; Directives following the section heading [PATH=/www/mysite] only
28; apply to PHP files in the /www/mysite directory.  Directives
29; following the section heading [HOST=www.example.com] only apply to
30; PHP files served from www.example.com.  Directives set in these
31; special sections cannot be overridden by user-defined INI files or
32; at runtime. Currently, [PATH=] and [HOST=] sections only work under
33; CGI/FastCGI.
34; https://php.net/ini.sections
35
36; Directives are specified using the following syntax:
37; directive = value
38; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
39; Directives are variables used to configure PHP or PHP extensions.
40; There is no name validation.  If PHP can't find an expected
41; directive because it is not set or is mistyped, a default value will be used.
42
43; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
44; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
45; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a
46; previously set variable or directive (e.g. ${foo})
47
48; Expressions in the INI file are limited to bitwise operators and parentheses:
49; |  bitwise OR
50; ^  bitwise XOR
51; &  bitwise AND
52; ~  bitwise NOT
53; !  boolean NOT
54
55; Boolean flags can be turned on using the values 1, On, True or Yes.
56; They can be turned off using the values 0, Off, False or No.
57
58; An empty string can be denoted by simply not writing anything after the equal
59; sign, or by using the None keyword:
60
61; foo =         ; sets foo to an empty string
62; foo = None    ; sets foo to an empty string
63; foo = "None"  ; sets foo to the string 'None'
64
65; If you use constants in your value, and these constants belong to a
66; dynamically loaded extension (either a PHP extension or a Zend extension),
67; you may only use these constants *after* the line that loads the extension.
68
69;;;;;;;;;;;;;;;;;;;
70; About this file ;
71;;;;;;;;;;;;;;;;;;;
72; PHP comes packaged with two INI files. One that is recommended to be used
73; in production environments and one that is recommended to be used in
74; development environments.
75
76; php.ini-production contains settings which hold security, performance and
77; best practices at its core. But please be aware, these settings may break
78; compatibility with older or less security-conscious applications. We
79; recommending using the production ini in production and testing environments.
80
81; php.ini-development is very similar to its production variant, except it is
82; much more verbose when it comes to errors. We recommend using the
83; development version only in development environments, as errors shown to
84; application users can inadvertently leak otherwise secure information.
85
86; This is the php.ini-development INI file.
87
88;;;;;;;;;;;;;;;;;;;
89; Quick Reference ;
90;;;;;;;;;;;;;;;;;;;
91
92; The following are all the settings which are different in either the production
93; or development versions of the INIs with respect to PHP's default behavior.
94; Please see the actual settings later in the document for more details as to why
95; we recommend these changes in PHP's behavior.
96
97; display_errors
98;   Default Value: On
99;   Development Value: On
100;   Production Value: Off
101
102; display_startup_errors
103;   Default Value: On
104;   Development Value: On
105;   Production Value: Off
106
107; error_reporting
108;   Default Value: E_ALL
109;   Development Value: E_ALL
110;   Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
111
112; log_errors
113;   Default Value: Off
114;   Development Value: On
115;   Production Value: On
116
117; max_input_time
118;   Default Value: -1 (Unlimited)
119;   Development Value: 60 (60 seconds)
120;   Production Value: 60 (60 seconds)
121
122; output_buffering
123;   Default Value: Off
124;   Development Value: 4096
125;   Production Value: 4096
126
127; register_argc_argv
128;   Default Value: On
129;   Development Value: Off
130;   Production Value: Off
131
132; request_order
133;   Default Value: None
134;   Development Value: "GP"
135;   Production Value: "GP"
136
137; session.gc_divisor
138;   Default Value: 100
139;   Development Value: 1000
140;   Production Value: 1000
141
142; session.sid_bits_per_character
143;   Default Value: 4
144;   Development Value: 5
145;   Production Value: 5
146
147; session.sid_length
148;   Default Value: 32
149;   Development Value: 26
150;   Production Value: 26
151
152; short_open_tag
153;   Default Value: On
154;   Development Value: Off
155;   Production Value: Off
156
157; variables_order
158;   Default Value: "EGPCS"
159;   Development Value: "GPCS"
160;   Production Value: "GPCS"
161
162; zend.assertions
163;   Default Value: 1
164;   Development Value: 1
165;   Production Value: -1
166
167; zend.exception_ignore_args
168;   Default Value: Off
169;   Development Value: Off
170;   Production Value: On
171
172; zend.exception_string_param_max_len
173;   Default Value: 15
174;   Development Value: 15
175;   Production Value: 0
176
177;;;;;;;;;;;;;;;;;;;;
178; php.ini Options  ;
179;;;;;;;;;;;;;;;;;;;;
180; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini"
181;user_ini.filename = ".user.ini"
182
183; To disable this feature set this option to an empty value
184;user_ini.filename =
185
186; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes)
187;user_ini.cache_ttl = 300
188
189;;;;;;;;;;;;;;;;;;;;
190; Language Options ;
191;;;;;;;;;;;;;;;;;;;;
192
193; Enable the PHP scripting language engine under Apache.
194; https://php.net/engine
195engine = On
196
197; This directive determines whether or not PHP will recognize code between
198; <? and ?> tags as PHP source which should be processed as such. It is
199; generally recommended that <?php and ?> should be used and that this feature
200; should be disabled, as enabling it may result in issues when generating XML
201; documents, however this remains supported for backward compatibility reasons.
202; Note that this directive does not control the <?= shorthand tag, which can be
203; used regardless of this directive.
204; Default Value: On
205; Development Value: Off
206; Production Value: Off
207; https://php.net/short-open-tag
208short_open_tag = Off
209
210; The number of significant digits displayed in floating point numbers.
211; https://php.net/precision
212precision = 14
213
214; Output buffering is a mechanism for controlling how much output data
215; (excluding headers and cookies) PHP should keep internally before pushing that
216; data to the client. If your application's output exceeds this setting, PHP
217; will send that data in chunks of roughly the size you specify.
218; Turning on this setting and managing its maximum buffer size can yield some
219; interesting side-effects depending on your application and web server.
220; You may be able to send headers and cookies after you've already sent output
221; through print or echo. You also may see performance benefits if your server is
222; emitting less packets due to buffered output versus PHP streaming the output
223; as it gets it. On production servers, 4096 bytes is a good setting for performance
224; reasons.
225; Note: Output buffering can also be controlled via Output Buffering Control
226;   functions.
227; Possible Values:
228;   On = Enabled and buffer is unlimited. (Use with caution)
229;   Off = Disabled
230;   Integer = Enables the buffer and sets its maximum size in bytes.
231; Note: This directive is hardcoded to Off for the CLI SAPI
232; Default Value: Off
233; Development Value: 4096
234; Production Value: 4096
235; https://php.net/output-buffering
236output_buffering = 4096
237
238; You can redirect all of the output of your scripts to a function.  For
239; example, if you set output_handler to "mb_output_handler", character
240; encoding will be transparently converted to the specified encoding.
241; Setting any output handler automatically turns on output buffering.
242; Note: People who wrote portable scripts should not depend on this ini
243;   directive. Instead, explicitly set the output handler using ob_start().
244;   Using this ini directive may cause problems unless you know what script
245;   is doing.
246; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler"
247;   and you cannot use both "ob_gzhandler" and "zlib.output_compression".
248; Note: output_handler must be empty if this is set 'On' !!!!
249;   Instead you must use zlib.output_handler.
250; https://php.net/output-handler
251;output_handler =
252
253; URL rewriter function rewrites URL on the fly by using
254; output buffer. You can set target tags by this configuration.
255; "form" tag is special tag. It will add hidden input tag to pass values.
256; Refer to session.trans_sid_tags for usage.
257; Default Value: "form="
258; Development Value: "form="
259; Production Value: "form="
260;url_rewriter.tags
261
262; URL rewriter will not rewrite absolute URL nor form by default. To enable
263; absolute URL rewrite, allowed hosts must be defined at RUNTIME.
264; Refer to session.trans_sid_hosts for more details.
265; Default Value: ""
266; Development Value: ""
267; Production Value: ""
268;url_rewriter.hosts
269
270; Transparent output compression using the zlib library
271; Valid values for this option are 'off', 'on', or a specific buffer size
272; to be used for compression (default is 4KB)
273; Note: Resulting chunk size may vary due to nature of compression. PHP
274;   outputs chunks that are few hundreds bytes each as a result of
275;   compression. If you prefer a larger chunk size for better
276;   performance, enable output_buffering in addition.
277; Note: You need to use zlib.output_handler instead of the standard
278;   output_handler, or otherwise the output will be corrupted.
279; https://php.net/zlib.output-compression
280zlib.output_compression = Off
281
282; https://php.net/zlib.output-compression-level
283;zlib.output_compression_level = -1
284
285; You cannot specify additional output handlers if zlib.output_compression
286; is activated here. This setting does the same as output_handler but in
287; a different order.
288; https://php.net/zlib.output-handler
289;zlib.output_handler =
290
291; Implicit flush tells PHP to tell the output layer to flush itself
292; automatically after every output block.  This is equivalent to calling the
293; PHP function flush() after each and every call to print() or echo() and each
294; and every HTML block.  Turning this option on has serious performance
295; implications and is generally recommended for debugging purposes only.
296; https://php.net/implicit-flush
297; Note: This directive is hardcoded to On for the CLI SAPI
298implicit_flush = Off
299
300; The unserialize callback function will be called (with the undefined class'
301; name as parameter), if the unserializer finds an undefined class
302; which should be instantiated. A warning appears if the specified function is
303; not defined, or if the function doesn't include/implement the missing class.
304; So only set this entry, if you really want to implement such a
305; callback-function.
306unserialize_callback_func =
307
308; The unserialize_max_depth specifies the default depth limit for unserialized
309; structures. Setting the depth limit too high may result in stack overflows
310; during unserialization. The unserialize_max_depth ini setting can be
311; overridden by the max_depth option on individual unserialize() calls.
312; A value of 0 disables the depth limit.
313;unserialize_max_depth = 4096
314
315; When floats & doubles are serialized, store serialize_precision significant
316; digits after the floating point. The default value ensures that when floats
317; are decoded with unserialize, the data will remain the same.
318; The value is also used for json_encode when encoding double values.
319; If -1 is used, then dtoa mode 0 is used which automatically select the best
320; precision.
321serialize_precision = -1
322
323; open_basedir, if set, limits all file operations to the defined directory
324; and below.  This directive makes most sense if used in a per-directory
325; or per-virtualhost web server configuration file.
326; Note: disables the realpath cache
327; https://php.net/open-basedir
328;open_basedir =
329
330; This directive allows you to disable certain functions.
331; It receives a comma-delimited list of function names.
332; https://php.net/disable-functions
333disable_functions =
334
335; This directive allows you to disable certain classes.
336; It receives a comma-delimited list of class names.
337; https://php.net/disable-classes
338disable_classes =
339
340; Colors for Syntax Highlighting mode.  Anything that's acceptable in
341; <span style="color: ???????"> would work.
342; https://php.net/syntax-highlighting
343;highlight.string  = #DD0000
344;highlight.comment = #FF9900
345;highlight.keyword = #007700
346;highlight.default = #0000BB
347;highlight.html    = #000000
348
349; If enabled, the request will be allowed to complete even if the user aborts
350; the request. Consider enabling it if executing long requests, which may end up
351; being interrupted by the user or a browser timing out. PHP's default behavior
352; is to disable this feature.
353; https://php.net/ignore-user-abort
354;ignore_user_abort = On
355
356; Determines the size of the realpath cache to be used by PHP. This value should
357; be increased on systems where PHP opens many files to reflect the quantity of
358; the file operations performed.
359; Note: if open_basedir is set, the cache is disabled
360; https://php.net/realpath-cache-size
361;realpath_cache_size = 4096k
362
363; Duration of time, in seconds for which to cache realpath information for a given
364; file or directory. For systems with rarely changing files, consider increasing this
365; value.
366; https://php.net/realpath-cache-ttl
367;realpath_cache_ttl = 120
368
369; Enables or disables the circular reference collector.
370; https://php.net/zend.enable-gc
371zend.enable_gc = On
372
373; If enabled, scripts may be written in encodings that are incompatible with
374; the scanner.  CP936, Big5, CP949 and Shift_JIS are the examples of such
375; encodings.  To use this feature, mbstring extension must be enabled.
376;zend.multibyte = Off
377
378; Allows to set the default encoding for the scripts.  This value will be used
379; unless "declare(encoding=...)" directive appears at the top of the script.
380; Only affects if zend.multibyte is set.
381;zend.script_encoding =
382
383; Allows to include or exclude arguments from stack traces generated for exceptions.
384; In production, it is recommended to turn this setting on to prohibit the output
385; of sensitive information in stack traces
386; Default Value: Off
387; Development Value: Off
388; Production Value: On
389zend.exception_ignore_args = Off
390
391; Allows setting the maximum string length in an argument of a stringified stack trace
392; to a value between 0 and 1000000.
393; This has no effect when zend.exception_ignore_args is enabled.
394; Default Value: 15
395; Development Value: 15
396; Production Value: 0
397zend.exception_string_param_max_len = 15
398
399;;;;;;;;;;;;;;;;;
400; Miscellaneous ;
401;;;;;;;;;;;;;;;;;
402
403; Decides whether PHP may expose the fact that it is installed on the server
404; (e.g. by adding its signature to the Web server header).  It is no security
405; threat in any way, but it makes it possible to determine whether you use PHP
406; on your server or not.
407; https://php.net/expose-php
408expose_php = On
409
410;;;;;;;;;;;;;;;;;;;
411; Resource Limits ;
412;;;;;;;;;;;;;;;;;;;
413
414; Maximum execution time of each script, in seconds
415; https://php.net/max-execution-time
416; Note: This directive is hardcoded to 0 for the CLI SAPI
417max_execution_time = 30
418
419; Maximum amount of time each script may spend parsing request data. It's a good
420; idea to limit this time on productions servers in order to eliminate unexpectedly
421; long running scripts.
422; Note: This directive is hardcoded to -1 for the CLI SAPI
423; Default Value: -1 (Unlimited)
424; Development Value: 60 (60 seconds)
425; Production Value: 60 (60 seconds)
426; https://php.net/max-input-time
427max_input_time = 60
428
429; Maximum input variable nesting level
430; https://php.net/max-input-nesting-level
431;max_input_nesting_level = 64
432
433; How many GET/POST/COOKIE input variables may be accepted
434;max_input_vars = 1000
435
436; How many multipart body parts (combined input variable and file uploads) may
437; be accepted.
438; Default Value: -1 (Sum of max_input_vars and max_file_uploads)
439;max_multipart_body_parts = 1500
440
441; Maximum amount of memory a script may consume
442; https://php.net/memory-limit
443memory_limit = 128M
444
445;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
446; Error handling and logging ;
447;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
448
449; This directive informs PHP of which errors, warnings and notices you would like
450; it to take action for. The recommended way of setting values for this
451; directive is through the use of the error level constants and bitwise
452; operators. The error level constants are below here for convenience as well as
453; some common settings and their meanings.
454; By default, PHP is set to take action on all errors, notices and warnings EXCEPT
455; those related to E_NOTICE and E_STRICT, which together cover best practices and
456; recommended coding standards in PHP. For performance reasons, this is the
457; recommend error reporting setting. Your production server shouldn't be wasting
458; resources complaining about best practices and coding standards. That's what
459; development servers and development settings are for.
460; Note: The php.ini-development file has this setting as E_ALL. This
461; means it pretty much reports everything which is exactly what you want during
462; development and early testing.
463;
464; Error Level Constants:
465; E_ALL             - All errors and warnings
466; E_ERROR           - fatal run-time errors
467; E_RECOVERABLE_ERROR  - almost fatal run-time errors
468; E_WARNING         - run-time warnings (non-fatal errors)
469; E_PARSE           - compile-time parse errors
470; E_NOTICE          - run-time notices (these are warnings which often result
471;                     from a bug in your code, but it's possible that it was
472;                     intentional (e.g., using an uninitialized variable and
473;                     relying on the fact it is automatically initialized to an
474;                     empty string)
475; E_STRICT          - run-time notices, enable to have PHP suggest changes
476;                     to your code which will ensure the best interoperability
477;                     and forward compatibility of your code
478; E_CORE_ERROR      - fatal errors that occur during PHP's initial startup
479; E_CORE_WARNING    - warnings (non-fatal errors) that occur during PHP's
480;                     initial startup
481; E_COMPILE_ERROR   - fatal compile-time errors
482; E_COMPILE_WARNING - compile-time warnings (non-fatal errors)
483; E_USER_ERROR      - user-generated error message
484; E_USER_WARNING    - user-generated warning message
485; E_USER_NOTICE     - user-generated notice message
486; E_DEPRECATED      - warn about code that will not work in future versions
487;                     of PHP
488; E_USER_DEPRECATED - user-generated deprecation warnings
489;
490; Common Values:
491;   E_ALL (Show all errors, warnings and notices including coding standards.)
492;   E_ALL & ~E_NOTICE  (Show all errors, except for notices)
493;   E_ALL & ~E_NOTICE & ~E_STRICT  (Show all errors, except for notices and coding standards warnings.)
494;   E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR  (Show only errors)
495; Default Value: E_ALL
496; Development Value: E_ALL
497; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
498; https://php.net/error-reporting
499error_reporting = E_ALL
500
501; This directive controls whether or not and where PHP will output errors,
502; notices and warnings too. Error output is very useful during development, but
503; it could be very dangerous in production environments. Depending on the code
504; which is triggering the error, sensitive information could potentially leak
505; out of your application such as database usernames and passwords or worse.
506; For production environments, we recommend logging errors rather than
507; sending them to STDOUT.
508; Possible Values:
509;   Off = Do not display any errors
510;   stderr = Display errors to STDERR (affects only CGI/CLI binaries!)
511;   On or stdout = Display errors to STDOUT
512; Default Value: On
513; Development Value: On
514; Production Value: Off
515; https://php.net/display-errors
516display_errors = On
517
518; The display of errors which occur during PHP's startup sequence are handled
519; separately from display_errors. We strongly recommend you set this to 'off'
520; for production servers to avoid leaking configuration details.
521; Default Value: On
522; Development Value: On
523; Production Value: Off
524; https://php.net/display-startup-errors
525display_startup_errors = On
526
527; Besides displaying errors, PHP can also log errors to locations such as a
528; server-specific log, STDERR, or a location specified by the error_log
529; directive found below. While errors should not be displayed on productions
530; servers they should still be monitored and logging is a great way to do that.
531; Default Value: Off
532; Development Value: On
533; Production Value: On
534; https://php.net/log-errors
535log_errors = On
536
537; Do not log repeated messages. Repeated errors must occur in same file on same
538; line unless ignore_repeated_source is set true.
539; https://php.net/ignore-repeated-errors
540ignore_repeated_errors = Off
541
542; Ignore source of message when ignoring repeated messages. When this setting
543; is On you will not log errors with repeated messages from different files or
544; source lines.
545; https://php.net/ignore-repeated-source
546ignore_repeated_source = Off
547
548; If this parameter is set to Off, then memory leaks will not be shown (on
549; stdout or in the log). This is only effective in a debug compile, and if
550; error reporting includes E_WARNING in the allowed list
551; https://php.net/report-memleaks
552report_memleaks = On
553
554; This setting is off by default.
555;report_zend_debug = 0
556
557; Turn off normal error reporting and emit XML-RPC error XML
558; https://php.net/xmlrpc-errors
559;xmlrpc_errors = 0
560
561; An XML-RPC faultCode
562;xmlrpc_error_number = 0
563
564; When PHP displays or logs an error, it has the capability of formatting the
565; error message as HTML for easier reading. This directive controls whether
566; the error message is formatted as HTML or not.
567; Note: This directive is hardcoded to Off for the CLI SAPI
568; https://php.net/html-errors
569;html_errors = On
570
571; If html_errors is set to On *and* docref_root is not empty, then PHP
572; produces clickable error messages that direct to a page describing the error
573; or function causing the error in detail.
574; You can download a copy of the PHP manual from https://php.net/docs
575; and change docref_root to the base URL of your local copy including the
576; leading '/'. You must also specify the file extension being used including
577; the dot. PHP's default behavior is to leave these settings empty, in which
578; case no links to documentation are generated.
579; Note: Never use this feature for production boxes.
580; https://php.net/docref-root
581; Examples
582;docref_root = "/phpmanual/"
583
584; https://php.net/docref-ext
585;docref_ext = .html
586
587; String to output before an error message. PHP's default behavior is to leave
588; this setting blank.
589; https://php.net/error-prepend-string
590; Example:
591;error_prepend_string = "<span style='color: #ff0000'>"
592
593; String to output after an error message. PHP's default behavior is to leave
594; this setting blank.
595; https://php.net/error-append-string
596; Example:
597;error_append_string = "</span>"
598
599; Log errors to specified file. PHP's default behavior is to leave this value
600; empty.
601; https://php.net/error-log
602; Example:
603;error_log = php_errors.log
604; Log errors to syslog (Event Log on Windows).
605;error_log = syslog
606
607; The syslog ident is a string which is prepended to every message logged
608; to syslog. Only used when error_log is set to syslog.
609;syslog.ident = php
610
611; The syslog facility is used to specify what type of program is logging
612; the message. Only used when error_log is set to syslog.
613;syslog.facility = user
614
615; Set this to disable filtering control characters (the default).
616; Some loggers only accept NVT-ASCII, others accept anything that's not
617; control characters. If your logger accepts everything, then no filtering
618; is needed at all.
619; Allowed values are:
620;   ascii (all printable ASCII characters and NL)
621;   no-ctrl (all characters except control characters)
622;   all (all characters)
623;   raw (like "all", but messages are not split at newlines)
624; https://php.net/syslog.filter
625;syslog.filter = ascii
626
627;windows.show_crt_warning
628; Default value: 0
629; Development value: 0
630; Production value: 0
631
632;;;;;;;;;;;;;;;;;
633; Data Handling ;
634;;;;;;;;;;;;;;;;;
635
636; The separator used in PHP generated URLs to separate arguments.
637; PHP's default setting is "&".
638; https://php.net/arg-separator.output
639; Example:
640;arg_separator.output = "&amp;"
641
642; List of separator(s) used by PHP to parse input URLs into variables.
643; PHP's default setting is "&".
644; NOTE: Every character in this directive is considered as separator!
645; https://php.net/arg-separator.input
646; Example:
647;arg_separator.input = ";&"
648
649; This directive determines which super global arrays are registered when PHP
650; starts up. G,P,C,E & S are abbreviations for the following respective super
651; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty
652; paid for the registration of these arrays and because ENV is not as commonly
653; used as the others, ENV is not recommended on productions servers. You
654; can still get access to the environment variables through getenv() should you
655; need to.
656; Default Value: "EGPCS"
657; Development Value: "GPCS"
658; Production Value: "GPCS";
659; https://php.net/variables-order
660variables_order = "GPCS"
661
662; This directive determines which super global data (G,P & C) should be
663; registered into the super global array REQUEST. If so, it also determines
664; the order in which that data is registered. The values for this directive
665; are specified in the same manner as the variables_order directive,
666; EXCEPT one. Leaving this value empty will cause PHP to use the value set
667; in the variables_order directive. It does not mean it will leave the super
668; globals array REQUEST empty.
669; Default Value: None
670; Development Value: "GP"
671; Production Value: "GP"
672; https://php.net/request-order
673request_order = "GP"
674
675; This directive determines whether PHP registers $argv & $argc each time it
676; runs. $argv contains an array of all the arguments passed to PHP when a script
677; is invoked. $argc contains an integer representing the number of arguments
678; that were passed when the script was invoked. These arrays are extremely
679; useful when running scripts from the command line. When this directive is
680; enabled, registering these variables consumes CPU cycles and memory each time
681; a script is executed. For performance reasons, this feature should be disabled
682; on production servers.
683; Note: This directive is hardcoded to On for the CLI SAPI
684; Default Value: On
685; Development Value: Off
686; Production Value: Off
687; https://php.net/register-argc-argv
688register_argc_argv = Off
689
690; When enabled, the ENV, REQUEST and SERVER variables are created when they're
691; first used (Just In Time) instead of when the script starts. If these
692; variables are not used within a script, having this directive on will result
693; in a performance gain. The PHP directive register_argc_argv must be disabled
694; for this directive to have any effect.
695; https://php.net/auto-globals-jit
696auto_globals_jit = On
697
698; Whether PHP will read the POST data.
699; This option is enabled by default.
700; Most likely, you won't want to disable this option globally. It causes $_POST
701; and $_FILES to always be empty; the only way you will be able to read the
702; POST data will be through the php://input stream wrapper. This can be useful
703; to proxy requests or to process the POST data in a memory efficient fashion.
704; https://php.net/enable-post-data-reading
705;enable_post_data_reading = Off
706
707; Maximum size of POST data that PHP will accept.
708; Its value may be 0 to disable the limit. It is ignored if POST data reading
709; is disabled through enable_post_data_reading.
710; https://php.net/post-max-size
711post_max_size = 8M
712
713; Automatically add files before PHP document.
714; https://php.net/auto-prepend-file
715auto_prepend_file =
716
717; Automatically add files after PHP document.
718; https://php.net/auto-append-file
719auto_append_file =
720
721; By default, PHP will output a media type using the Content-Type header. To
722; disable this, simply set it to be empty.
723;
724; PHP's built-in default media type is set to text/html.
725; https://php.net/default-mimetype
726default_mimetype = "text/html"
727
728; PHP's default character set is set to UTF-8.
729; https://php.net/default-charset
730default_charset = "UTF-8"
731
732; PHP internal character encoding is set to empty.
733; If empty, default_charset is used.
734; https://php.net/internal-encoding
735;internal_encoding =
736
737; PHP input character encoding is set to empty.
738; If empty, default_charset is used.
739; https://php.net/input-encoding
740;input_encoding =
741
742; PHP output character encoding is set to empty.
743; If empty, default_charset is used.
744; See also output_buffer.
745; https://php.net/output-encoding
746;output_encoding =
747
748;;;;;;;;;;;;;;;;;;;;;;;;;
749; Paths and Directories ;
750;;;;;;;;;;;;;;;;;;;;;;;;;
751
752; UNIX: "/path1:/path2"
753;include_path = ".:/php/includes"
754;
755; Windows: "\path1;\path2"
756;include_path = ".;c:\php\includes"
757;
758; PHP's default setting for include_path is ".;/path/to/php/pear"
759; https://php.net/include-path
760
761; The root of the PHP pages, used only if nonempty.
762; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
763; if you are running php as a CGI under any web server (other than IIS)
764; see documentation for security issues.  The alternate is to use the
765; cgi.force_redirect configuration below
766; https://php.net/doc-root
767doc_root =
768
769; The directory under which PHP opens the script using /~username used only
770; if nonempty.
771; https://php.net/user-dir
772user_dir =
773
774; Directory in which the loadable extensions (modules) reside.
775; https://php.net/extension-dir
776;extension_dir = "./"
777; On windows:
778;extension_dir = "ext"
779
780; Directory where the temporary files should be placed.
781; Defaults to the system default (see sys_get_temp_dir)
782;sys_temp_dir = "/tmp"
783
784; Whether or not to enable the dl() function.  The dl() function does NOT work
785; properly in multithreaded servers, such as IIS or Zeus, and is automatically
786; disabled on them.
787; https://php.net/enable-dl
788enable_dl = Off
789
790; cgi.force_redirect is necessary to provide security running PHP as a CGI under
791; most web servers.  Left undefined, PHP turns this on by default.  You can
792; turn it off here AT YOUR OWN RISK
793; **You CAN safely turn this off for IIS, in fact, you MUST.**
794; https://php.net/cgi.force-redirect
795;cgi.force_redirect = 1
796
797; if cgi.nph is enabled it will force cgi to always sent Status: 200 with
798; every request. PHP's default behavior is to disable this feature.
799;cgi.nph = 1
800
801; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape
802; (iPlanet) web servers, you MAY need to set an environment variable name that PHP
803; will look for to know it is OK to continue execution.  Setting this variable MAY
804; cause security issues, KNOW WHAT YOU ARE DOING FIRST.
805; https://php.net/cgi.redirect-status-env
806;cgi.redirect_status_env =
807
808; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI.  PHP's
809; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
810; what PATH_INFO is.  For more information on PATH_INFO, see the cgi specs.  Setting
811; this to 1 will cause PHP CGI to fix its paths to conform to the spec.  A setting
812; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
813; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
814; https://php.net/cgi.fix-pathinfo
815;cgi.fix_pathinfo=1
816
817; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside
818; of the web tree and people will not be able to circumvent .htaccess security.
819;cgi.discard_path=1
820
821; FastCGI under IIS supports the ability to impersonate
822; security tokens of the calling client.  This allows IIS to define the
823; security context that the request runs under.  mod_fastcgi under Apache
824; does not currently support this feature (03/17/2002)
825; Set to 1 if running under IIS.  Default is zero.
826; https://php.net/fastcgi.impersonate
827;fastcgi.impersonate = 1
828
829; Disable logging through FastCGI connection. PHP's default behavior is to enable
830; this feature.
831;fastcgi.logging = 0
832
833; cgi.rfc2616_headers configuration option tells PHP what type of headers to
834; use when sending HTTP response code. If set to 0, PHP sends Status: header that
835; is supported by Apache. When this option is set to 1, PHP will send
836; RFC2616 compliant header.
837; Default is zero.
838; https://php.net/cgi.rfc2616-headers
839;cgi.rfc2616_headers = 0
840
841; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #!
842; (shebang) at the top of the running script. This line might be needed if the
843; script support running both as stand-alone script and via PHP CGI<. PHP in CGI
844; mode skips this line and ignores its content if this directive is turned on.
845; https://php.net/cgi.check-shebang-line
846;cgi.check_shebang_line=1
847
848;;;;;;;;;;;;;;;;
849; File Uploads ;
850;;;;;;;;;;;;;;;;
851
852; Whether to allow HTTP file uploads.
853; https://php.net/file-uploads
854file_uploads = On
855
856; Temporary directory for HTTP uploaded files (will use system default if not
857; specified).
858; https://php.net/upload-tmp-dir
859;upload_tmp_dir =
860
861; Maximum allowed size for uploaded files.
862; https://php.net/upload-max-filesize
863upload_max_filesize = 2M
864
865; Maximum number of files that can be uploaded via a single request
866max_file_uploads = 20
867
868;;;;;;;;;;;;;;;;;;
869; Fopen wrappers ;
870;;;;;;;;;;;;;;;;;;
871
872; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
873; https://php.net/allow-url-fopen
874allow_url_fopen = On
875
876; Whether to allow include/require to open URLs (like https:// or ftp://) as files.
877; https://php.net/allow-url-include
878allow_url_include = Off
879
880; Define the anonymous ftp password (your email address). PHP's default setting
881; for this is empty.
882; https://php.net/from
883;from="john@doe.com"
884
885; Define the User-Agent string. PHP's default setting for this is empty.
886; https://php.net/user-agent
887;user_agent="PHP"
888
889; Default timeout for socket based streams (seconds)
890; https://php.net/default-socket-timeout
891default_socket_timeout = 60
892
893; If your scripts have to deal with files from Macintosh systems,
894; or you are running on a Mac and need to deal with files from
895; unix or win32 systems, setting this flag will cause PHP to
896; automatically detect the EOL character in those files so that
897; fgets() and file() will work regardless of the source of the file.
898; https://php.net/auto-detect-line-endings
899;auto_detect_line_endings = Off
900
901;;;;;;;;;;;;;;;;;;;;;;
902; Dynamic Extensions ;
903;;;;;;;;;;;;;;;;;;;;;;
904
905; If you wish to have an extension loaded automatically, use the following
906; syntax:
907;
908;   extension=modulename
909;
910; For example:
911;
912;   extension=mysqli
913;
914; When the extension library to load is not located in the default extension
915; directory, You may specify an absolute path to the library file:
916;
917;   extension=/path/to/extension/mysqli.so
918;
919; Note : The syntax used in previous PHP versions ('extension=<ext>.so' and
920; 'extension='php_<ext>.dll') is supported for legacy reasons and may be
921; deprecated in a future PHP major version. So, when it is possible, please
922; move to the new ('extension=<ext>) syntax.
923;
924; Notes for Windows environments :
925;
926; - Many DLL files are located in the ext/
927;   extension folders as well as the separate PECL DLL download.
928;   Be sure to appropriately set the extension_dir directive.
929;
930;extension=bz2
931
932; The ldap extension must be before curl if OpenSSL 1.0.2 and OpenLDAP is used
933; otherwise it results in segfault when unloading after using SASL.
934; See https://github.com/php/php-src/issues/8620 for more info.
935;extension=ldap
936
937;extension=curl
938;extension=ffi
939;extension=ftp
940;extension=fileinfo
941;extension=gd
942;extension=gettext
943;extension=gmp
944;extension=intl
945;extension=mbstring
946;extension=exif      ; Must be after mbstring as it depends on it
947;extension=mysqli
948;extension=odbc
949;extension=openssl
950;extension=pdo_firebird
951;extension=pdo_mysql
952;extension=pdo_odbc
953;extension=pdo_pgsql
954;extension=pdo_sqlite
955;extension=pgsql
956;extension=shmop
957
958; The MIBS data available in the PHP distribution must be installed.
959; See https://www.php.net/manual/en/snmp.installation.php
960;extension=snmp
961
962;extension=soap
963;extension=sockets
964;extension=sodium
965;extension=sqlite3
966;extension=tidy
967;extension=xsl
968;extension=zip
969
970;zend_extension=opcache
971
972;;;;;;;;;;;;;;;;;;;
973; Module Settings ;
974;;;;;;;;;;;;;;;;;;;
975
976[CLI Server]
977; Whether the CLI web server uses ANSI color coding in its terminal output.
978cli_server.color = On
979
980[Date]
981; Defines the default timezone used by the date functions
982; https://php.net/date.timezone
983;date.timezone =
984
985; https://php.net/date.default-latitude
986;date.default_latitude = 31.7667
987
988; https://php.net/date.default-longitude
989;date.default_longitude = 35.2333
990
991; https://php.net/date.sunrise-zenith
992;date.sunrise_zenith = 90.833333
993
994; https://php.net/date.sunset-zenith
995;date.sunset_zenith = 90.833333
996
997[filter]
998; https://php.net/filter.default
999;filter.default = unsafe_raw
1000
1001; https://php.net/filter.default-flags
1002;filter.default_flags =
1003
1004[iconv]
1005; Use of this INI entry is deprecated, use global input_encoding instead.
1006; If empty, default_charset or input_encoding or iconv.input_encoding is used.
1007; The precedence is: default_charset < input_encoding < iconv.input_encoding
1008;iconv.input_encoding =
1009
1010; Use of this INI entry is deprecated, use global internal_encoding instead.
1011; If empty, default_charset or internal_encoding or iconv.internal_encoding is used.
1012; The precedence is: default_charset < internal_encoding < iconv.internal_encoding
1013;iconv.internal_encoding =
1014
1015; Use of this INI entry is deprecated, use global output_encoding instead.
1016; If empty, default_charset or output_encoding or iconv.output_encoding is used.
1017; The precedence is: default_charset < output_encoding < iconv.output_encoding
1018; To use an output encoding conversion, iconv's output handler must be set
1019; otherwise output encoding conversion cannot be performed.
1020;iconv.output_encoding =
1021
1022[intl]
1023;intl.default_locale =
1024; This directive allows you to produce PHP errors when some error
1025; happens within intl functions. The value is the level of the error produced.
1026; Default is 0, which does not produce any errors.
1027;intl.error_level = E_WARNING
1028;intl.use_exceptions = 0
1029
1030[sqlite3]
1031; Directory pointing to SQLite3 extensions
1032; https://php.net/sqlite3.extension-dir
1033;sqlite3.extension_dir =
1034
1035; SQLite defensive mode flag (only available from SQLite 3.26+)
1036; When the defensive flag is enabled, language features that allow ordinary
1037; SQL to deliberately corrupt the database file are disabled. This forbids
1038; writing directly to the schema, shadow tables (eg. FTS data tables), or
1039; the sqlite_dbpage virtual table.
1040; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html
1041; (for older SQLite versions, this flag has no use)
1042;sqlite3.defensive = 1
1043
1044[Pcre]
1045; PCRE library backtracking limit.
1046; https://php.net/pcre.backtrack-limit
1047;pcre.backtrack_limit=100000
1048
1049; PCRE library recursion limit.
1050; Please note that if you set this value to a high number you may consume all
1051; the available process stack and eventually crash PHP (due to reaching the
1052; stack size limit imposed by the Operating System).
1053; https://php.net/pcre.recursion-limit
1054;pcre.recursion_limit=100000
1055
1056; Enables or disables JIT compilation of patterns. This requires the PCRE
1057; library to be compiled with JIT support.
1058;pcre.jit=1
1059
1060[Pdo]
1061; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off"
1062; https://php.net/pdo-odbc.connection-pooling
1063;pdo_odbc.connection_pooling=strict
1064
1065[Pdo_mysql]
1066; Default socket name for local MySQL connects.  If empty, uses the built-in
1067; MySQL defaults.
1068pdo_mysql.default_socket=
1069
1070[Phar]
1071; https://php.net/phar.readonly
1072;phar.readonly = On
1073
1074; https://php.net/phar.require-hash
1075;phar.require_hash = On
1076
1077;phar.cache_list =
1078
1079[mail function]
1080; For Win32 only.
1081; https://php.net/smtp
1082SMTP = localhost
1083; https://php.net/smtp-port
1084smtp_port = 25
1085
1086; For Win32 only.
1087; https://php.net/sendmail-from
1088;sendmail_from = me@example.com
1089
1090; For Unix only.  You may supply arguments as well (default: "sendmail -t -i").
1091; https://php.net/sendmail-path
1092;sendmail_path =
1093
1094; Force the addition of the specified parameters to be passed as extra parameters
1095; to the sendmail binary. These parameters will always replace the value of
1096; the 5th parameter to mail().
1097;mail.force_extra_parameters =
1098
1099; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename
1100mail.add_x_header = Off
1101
1102; Use mixed LF and CRLF line separators to keep compatibility with some
1103; RFC 2822 non conformant MTA.
1104mail.mixed_lf_and_crlf = Off
1105
1106; The path to a log file that will log all mail() calls. Log entries include
1107; the full path of the script, line number, To address and headers.
1108;mail.log =
1109; Log mail to syslog (Event Log on Windows).
1110;mail.log = syslog
1111
1112[ODBC]
1113; https://php.net/odbc.default-db
1114;odbc.default_db    =  Not yet implemented
1115
1116; https://php.net/odbc.default-user
1117;odbc.default_user  =  Not yet implemented
1118
1119; https://php.net/odbc.default-pw
1120;odbc.default_pw    =  Not yet implemented
1121
1122; Controls the ODBC cursor model.
1123; Default: SQL_CURSOR_STATIC (default).
1124;odbc.default_cursortype
1125
1126; Allow or prevent persistent links.
1127; https://php.net/odbc.allow-persistent
1128odbc.allow_persistent = On
1129
1130; Check that a connection is still valid before reuse.
1131; https://php.net/odbc.check-persistent
1132odbc.check_persistent = On
1133
1134; Maximum number of persistent links.  -1 means no limit.
1135; https://php.net/odbc.max-persistent
1136odbc.max_persistent = -1
1137
1138; Maximum number of links (persistent + non-persistent).  -1 means no limit.
1139; https://php.net/odbc.max-links
1140odbc.max_links = -1
1141
1142; Handling of LONG fields.  Returns number of bytes to variables.  0 means
1143; passthru.
1144; https://php.net/odbc.defaultlrl
1145odbc.defaultlrl = 4096
1146
1147; Handling of binary data.  0 means passthru, 1 return as is, 2 convert to char.
1148; See the documentation on odbc_binmode and odbc_longreadlen for an explanation
1149; of odbc.defaultlrl and odbc.defaultbinmode
1150; https://php.net/odbc.defaultbinmode
1151odbc.defaultbinmode = 1
1152
1153[MySQLi]
1154
1155; Maximum number of persistent links.  -1 means no limit.
1156; https://php.net/mysqli.max-persistent
1157mysqli.max_persistent = -1
1158
1159; Allow accessing, from PHP's perspective, local files with LOAD DATA statements
1160; https://php.net/mysqli.allow_local_infile
1161;mysqli.allow_local_infile = On
1162
1163; It allows the user to specify a folder where files that can be sent via LOAD DATA
1164; LOCAL can exist. It is ignored if mysqli.allow_local_infile is enabled.
1165;mysqli.local_infile_directory =
1166
1167; Allow or prevent persistent links.
1168; https://php.net/mysqli.allow-persistent
1169mysqli.allow_persistent = On
1170
1171; Maximum number of links.  -1 means no limit.
1172; https://php.net/mysqli.max-links
1173mysqli.max_links = -1
1174
1175; Default port number for mysqli_connect().  If unset, mysqli_connect() will use
1176; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
1177; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
1178; at MYSQL_PORT.
1179; https://php.net/mysqli.default-port
1180mysqli.default_port = 3306
1181
1182; Default socket name for local MySQL connects.  If empty, uses the built-in
1183; MySQL defaults.
1184; https://php.net/mysqli.default-socket
1185mysqli.default_socket =
1186
1187; Default host for mysqli_connect() (doesn't apply in safe mode).
1188; https://php.net/mysqli.default-host
1189mysqli.default_host =
1190
1191; Default user for mysqli_connect() (doesn't apply in safe mode).
1192; https://php.net/mysqli.default-user
1193mysqli.default_user =
1194
1195; Default password for mysqli_connect() (doesn't apply in safe mode).
1196; Note that this is generally a *bad* idea to store passwords in this file.
1197; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw")
1198; and reveal this password!  And of course, any users with read access to this
1199; file will be able to reveal the password as well.
1200; https://php.net/mysqli.default-pw
1201mysqli.default_pw =
1202
1203; If this option is enabled, closing a persistent connection will rollback
1204; any pending transactions of this connection, before it is put back
1205; into the persistent connection pool.
1206;mysqli.rollback_on_cached_plink = Off
1207
1208[mysqlnd]
1209; Enable / Disable collection of general statistics by mysqlnd which can be
1210; used to tune and monitor MySQL operations.
1211mysqlnd.collect_statistics = On
1212
1213; Enable / Disable collection of memory usage statistics by mysqlnd which can be
1214; used to tune and monitor MySQL operations.
1215mysqlnd.collect_memory_statistics = On
1216
1217; Records communication from all extensions using mysqlnd to the specified log
1218; file.
1219; https://php.net/mysqlnd.debug
1220;mysqlnd.debug =
1221
1222; Defines which queries will be logged.
1223;mysqlnd.log_mask = 0
1224
1225; Default size of the mysqlnd memory pool, which is used by result sets.
1226;mysqlnd.mempool_default_size = 16000
1227
1228; Size of a pre-allocated buffer used when sending commands to MySQL in bytes.
1229;mysqlnd.net_cmd_buffer_size = 2048
1230
1231; Size of a pre-allocated buffer used for reading data sent by the server in
1232; bytes.
1233;mysqlnd.net_read_buffer_size = 32768
1234
1235; Timeout for network requests in seconds.
1236;mysqlnd.net_read_timeout = 31536000
1237
1238; SHA-256 Authentication Plugin related. File with the MySQL server public RSA
1239; key.
1240;mysqlnd.sha256_server_public_key =
1241
1242[PostgreSQL]
1243; Allow or prevent persistent links.
1244; https://php.net/pgsql.allow-persistent
1245pgsql.allow_persistent = On
1246
1247; Detect broken persistent links always with pg_pconnect().
1248; Auto reset feature requires a little overheads.
1249; https://php.net/pgsql.auto-reset-persistent
1250pgsql.auto_reset_persistent = Off
1251
1252; Maximum number of persistent links.  -1 means no limit.
1253; https://php.net/pgsql.max-persistent
1254pgsql.max_persistent = -1
1255
1256; Maximum number of links (persistent+non persistent).  -1 means no limit.
1257; https://php.net/pgsql.max-links
1258pgsql.max_links = -1
1259
1260; Ignore PostgreSQL backends Notice message or not.
1261; Notice message logging require a little overheads.
1262; https://php.net/pgsql.ignore-notice
1263pgsql.ignore_notice = 0
1264
1265; Log PostgreSQL backends Notice message or not.
1266; Unless pgsql.ignore_notice=0, module cannot log notice message.
1267; https://php.net/pgsql.log-notice
1268pgsql.log_notice = 0
1269
1270[bcmath]
1271; Number of decimal digits for all bcmath functions.
1272; https://php.net/bcmath.scale
1273bcmath.scale = 0
1274
1275[browscap]
1276; https://php.net/browscap
1277;browscap = extra/browscap.ini
1278
1279[Session]
1280; Handler used to store/retrieve data.
1281; https://php.net/session.save-handler
1282session.save_handler = files
1283
1284; Argument passed to save_handler.  In the case of files, this is the path
1285; where data files are stored. Note: Windows users have to change this
1286; variable in order to use PHP's session functions.
1287;
1288; The path can be defined as:
1289;
1290;     session.save_path = "N;/path"
1291;
1292; where N is an integer.  Instead of storing all the session files in
1293; /path, what this will do is use subdirectories N-levels deep, and
1294; store the session data in those directories.  This is useful if
1295; your OS has problems with many files in one directory, and is
1296; a more efficient layout for servers that handle many sessions.
1297;
1298; NOTE 1: PHP will not create this directory structure automatically.
1299;         You can use the script in the ext/session dir for that purpose.
1300; NOTE 2: See the section on garbage collection below if you choose to
1301;         use subdirectories for session storage
1302;
1303; The file storage module creates files using mode 600 by default.
1304; You can change that by using
1305;
1306;     session.save_path = "N;MODE;/path"
1307;
1308; where MODE is the octal representation of the mode. Note that this
1309; does not overwrite the process's umask.
1310; https://php.net/session.save-path
1311;session.save_path = "/tmp"
1312
1313; Whether to use strict session mode.
1314; Strict session mode does not accept an uninitialized session ID, and
1315; regenerates the session ID if the browser sends an uninitialized session ID.
1316; Strict mode protects applications from session fixation via a session adoption
1317; vulnerability. It is disabled by default for maximum compatibility, but
1318; enabling it is encouraged.
1319; https://wiki.php.net/rfc/strict_sessions
1320session.use_strict_mode = 0
1321
1322; Whether to use cookies.
1323; https://php.net/session.use-cookies
1324session.use_cookies = 1
1325
1326; https://php.net/session.cookie-secure
1327;session.cookie_secure =
1328
1329; This option forces PHP to fetch and use a cookie for storing and maintaining
1330; the session id. We encourage this operation as it's very helpful in combating
1331; session hijacking when not specifying and managing your own session id. It is
1332; not the be-all and end-all of session hijacking defense, but it's a good start.
1333; https://php.net/session.use-only-cookies
1334session.use_only_cookies = 1
1335
1336; Name of the session (used as cookie name).
1337; https://php.net/session.name
1338session.name = PHPSESSID
1339
1340; Initialize session on request startup.
1341; https://php.net/session.auto-start
1342session.auto_start = 0
1343
1344; Lifetime in seconds of cookie or, if 0, until browser is restarted.
1345; https://php.net/session.cookie-lifetime
1346session.cookie_lifetime = 0
1347
1348; The path for which the cookie is valid.
1349; https://php.net/session.cookie-path
1350session.cookie_path = /
1351
1352; The domain for which the cookie is valid.
1353; https://php.net/session.cookie-domain
1354session.cookie_domain =
1355
1356; Whether or not to add the httpOnly flag to the cookie, which makes it
1357; inaccessible to browser scripting languages such as JavaScript.
1358; https://php.net/session.cookie-httponly
1359session.cookie_httponly =
1360
1361; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF)
1362; Current valid values are "Strict", "Lax" or "None". When using "None",
1363; make sure to include the quotes, as `none` is interpreted like `false` in ini files.
1364; https://tools.ietf.org/html/draft-west-first-party-cookies-07
1365session.cookie_samesite =
1366
1367; Handler used to serialize data. php is the standard serializer of PHP.
1368; https://php.net/session.serialize-handler
1369session.serialize_handler = php
1370
1371; Defines the probability that the 'garbage collection' process is started on every
1372; session initialization. The probability is calculated by using gc_probability/gc_divisor,
1373; e.g. 1/100 means there is a 1% chance that the GC process starts on each request.
1374; Default Value: 1
1375; Development Value: 1
1376; Production Value: 1
1377; https://php.net/session.gc-probability
1378session.gc_probability = 1
1379
1380; Defines the probability that the 'garbage collection' process is started on every
1381; session initialization. The probability is calculated by using gc_probability/gc_divisor,
1382; e.g. 1/100 means there is a 1% chance that the GC process starts on each request.
1383; For high volume production servers, using a value of 1000 is a more efficient approach.
1384; Default Value: 100
1385; Development Value: 1000
1386; Production Value: 1000
1387; https://php.net/session.gc-divisor
1388session.gc_divisor = 1000
1389
1390; After this number of seconds, stored data will be seen as 'garbage' and
1391; cleaned up by the garbage collection process.
1392; https://php.net/session.gc-maxlifetime
1393session.gc_maxlifetime = 1440
1394
1395; NOTE: If you are using the subdirectory option for storing session files
1396;       (see session.save_path above), then garbage collection does *not*
1397;       happen automatically.  You will need to do your own garbage
1398;       collection through a shell script, cron entry, or some other method.
1399;       For example, the following script is the equivalent of setting
1400;       session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
1401;          find /path/to/sessions -cmin +24 -type f | xargs rm
1402
1403; Check HTTP Referer to invalidate externally stored URLs containing ids.
1404; HTTP_REFERER has to contain this substring for the session to be
1405; considered as valid.
1406; https://php.net/session.referer-check
1407session.referer_check =
1408
1409; Set to {nocache,private,public,} to determine HTTP caching aspects
1410; or leave this empty to avoid sending anti-caching headers.
1411; https://php.net/session.cache-limiter
1412session.cache_limiter = nocache
1413
1414; Document expires after n minutes.
1415; https://php.net/session.cache-expire
1416session.cache_expire = 180
1417
1418; trans sid support is disabled by default.
1419; Use of trans sid may risk your users' security.
1420; Use this option with caution.
1421; - User may send URL contains active session ID
1422;   to other person via. email/irc/etc.
1423; - URL that contains active session ID may be stored
1424;   in publicly accessible computer.
1425; - User may access your site with the same session ID
1426;   always using URL stored in browser's history or bookmarks.
1427; https://php.net/session.use-trans-sid
1428session.use_trans_sid = 0
1429
1430; Set session ID character length. This value could be between 22 to 256.
1431; Shorter length than default is supported only for compatibility reason.
1432; Users should use 32 or more chars.
1433; https://php.net/session.sid-length
1434; Default Value: 32
1435; Development Value: 26
1436; Production Value: 26
1437session.sid_length = 26
1438
1439; The URL rewriter will look for URLs in a defined set of HTML tags.
1440; <form> is special; if you include them here, the rewriter will
1441; add a hidden <input> field with the info which is otherwise appended
1442; to URLs. <form> tag's action attribute URL will not be modified
1443; unless it is specified.
1444; Note that all valid entries require a "=", even if no value follows.
1445; Default Value: "a=href,area=href,frame=src,form="
1446; Development Value: "a=href,area=href,frame=src,form="
1447; Production Value: "a=href,area=href,frame=src,form="
1448; https://php.net/url-rewriter.tags
1449session.trans_sid_tags = "a=href,area=href,frame=src,form="
1450
1451; URL rewriter does not rewrite absolute URLs by default.
1452; To enable rewrites for absolute paths, target hosts must be specified
1453; at RUNTIME. i.e. use ini_set()
1454; <form> tags is special. PHP will check action attribute's URL regardless
1455; of session.trans_sid_tags setting.
1456; If no host is defined, HTTP_HOST will be used for allowed host.
1457; Example value: php.net,www.php.net,wiki.php.net
1458; Use "," for multiple hosts. No spaces are allowed.
1459; Default Value: ""
1460; Development Value: ""
1461; Production Value: ""
1462;session.trans_sid_hosts=""
1463
1464; Define how many bits are stored in each character when converting
1465; the binary hash data to something readable.
1466; Possible values:
1467;   4  (4 bits: 0-9, a-f)
1468;   5  (5 bits: 0-9, a-v)
1469;   6  (6 bits: 0-9, a-z, A-Z, "-", ",")
1470; Default Value: 4
1471; Development Value: 5
1472; Production Value: 5
1473; https://php.net/session.hash-bits-per-character
1474session.sid_bits_per_character = 5
1475
1476; Enable upload progress tracking in $_SESSION
1477; Default Value: On
1478; Development Value: On
1479; Production Value: On
1480; https://php.net/session.upload-progress.enabled
1481;session.upload_progress.enabled = On
1482
1483; Cleanup the progress information as soon as all POST data has been read
1484; (i.e. upload completed).
1485; Default Value: On
1486; Development Value: On
1487; Production Value: On
1488; https://php.net/session.upload-progress.cleanup
1489;session.upload_progress.cleanup = On
1490
1491; A prefix used for the upload progress key in $_SESSION
1492; Default Value: "upload_progress_"
1493; Development Value: "upload_progress_"
1494; Production Value: "upload_progress_"
1495; https://php.net/session.upload-progress.prefix
1496;session.upload_progress.prefix = "upload_progress_"
1497
1498; The index name (concatenated with the prefix) in $_SESSION
1499; containing the upload progress information
1500; Default Value: "PHP_SESSION_UPLOAD_PROGRESS"
1501; Development Value: "PHP_SESSION_UPLOAD_PROGRESS"
1502; Production Value: "PHP_SESSION_UPLOAD_PROGRESS"
1503; https://php.net/session.upload-progress.name
1504;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS"
1505
1506; How frequently the upload progress should be updated.
1507; Given either in percentages (per-file), or in bytes
1508; Default Value: "1%"
1509; Development Value: "1%"
1510; Production Value: "1%"
1511; https://php.net/session.upload-progress.freq
1512;session.upload_progress.freq =  "1%"
1513
1514; The minimum delay between updates, in seconds
1515; Default Value: 1
1516; Development Value: 1
1517; Production Value: 1
1518; https://php.net/session.upload-progress.min-freq
1519;session.upload_progress.min_freq = "1"
1520
1521; Only write session data when session data is changed. Enabled by default.
1522; https://php.net/session.lazy-write
1523;session.lazy_write = On
1524
1525[Assertion]
1526; Switch whether to compile assertions at all (to have no overhead at run-time)
1527; -1: Do not compile at all
1528;  0: Jump over assertion at run-time
1529;  1: Execute assertions
1530; Changing from or to a negative value is only possible in php.ini!
1531; (For turning assertions on and off at run-time, toggle zend.assertions between the values 1 and 0)
1532; Default Value: 1
1533; Development Value: 1
1534; Production Value: -1
1535; https://php.net/zend.assertions
1536zend.assertions = 1
1537
1538[COM]
1539; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
1540; https://php.net/com.typelib-file
1541;com.typelib_file =
1542
1543; allow Distributed-COM calls
1544; https://php.net/com.allow-dcom
1545;com.allow_dcom = true
1546
1547; autoregister constants of a component's typelib on com_load()
1548; https://php.net/com.autoregister-typelib
1549;com.autoregister_typelib = true
1550
1551; register constants casesensitive
1552; https://php.net/com.autoregister-casesensitive
1553;com.autoregister_casesensitive = false
1554
1555; show warnings on duplicate constant registrations
1556; https://php.net/com.autoregister-verbose
1557;com.autoregister_verbose = true
1558
1559; The default character set code-page to use when passing strings to and from COM objects.
1560; Default: system ANSI code page
1561;com.code_page=
1562
1563; The version of the .NET framework to use. The value of the setting are the first three parts
1564; of the framework's version number, separated by dots, and prefixed with "v", e.g. "v4.0.30319".
1565;com.dotnet_version=
1566
1567[mbstring]
1568; language for internal character representation.
1569; This affects mb_send_mail() and mbstring.detect_order.
1570; https://php.net/mbstring.language
1571;mbstring.language = Japanese
1572
1573; Use of this INI entry is deprecated, use global internal_encoding instead.
1574; internal/script encoding.
1575; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*)
1576; If empty, default_charset or internal_encoding or iconv.internal_encoding is used.
1577; The precedence is: default_charset < internal_encoding < iconv.internal_encoding
1578;mbstring.internal_encoding =
1579
1580; Use of this INI entry is deprecated, use global input_encoding instead.
1581; http input encoding.
1582; mbstring.encoding_translation = On is needed to use this setting.
1583; If empty, default_charset or input_encoding or mbstring.input is used.
1584; The precedence is: default_charset < input_encoding < mbstring.http_input
1585; https://php.net/mbstring.http-input
1586;mbstring.http_input =
1587
1588; Use of this INI entry is deprecated, use global output_encoding instead.
1589; http output encoding.
1590; mb_output_handler must be registered as output buffer to function.
1591; If empty, default_charset or output_encoding or mbstring.http_output is used.
1592; The precedence is: default_charset < output_encoding < mbstring.http_output
1593; To use an output encoding conversion, mbstring's output handler must be set
1594; otherwise output encoding conversion cannot be performed.
1595; https://php.net/mbstring.http-output
1596;mbstring.http_output =
1597
1598; enable automatic encoding translation according to
1599; mbstring.internal_encoding setting. Input chars are
1600; converted to internal encoding by setting this to On.
1601; Note: Do _not_ use automatic encoding translation for
1602;       portable libs/applications.
1603; https://php.net/mbstring.encoding-translation
1604;mbstring.encoding_translation = Off
1605
1606; automatic encoding detection order.
1607; "auto" detect order is changed according to mbstring.language
1608; https://php.net/mbstring.detect-order
1609;mbstring.detect_order = auto
1610
1611; substitute_character used when character cannot be converted
1612; one from another
1613; https://php.net/mbstring.substitute-character
1614;mbstring.substitute_character = none
1615
1616; Enable strict encoding detection.
1617;mbstring.strict_detection = Off
1618
1619; This directive specifies the regex pattern of content types for which mb_output_handler()
1620; is activated.
1621; Default: mbstring.http_output_conv_mimetypes=^(text/|application/xhtml\+xml)
1622;mbstring.http_output_conv_mimetypes=
1623
1624; This directive specifies maximum stack depth for mbstring regular expressions. It is similar
1625; to the pcre.recursion_limit for PCRE.
1626;mbstring.regex_stack_limit=100000
1627
1628; This directive specifies maximum retry count for mbstring regular expressions. It is similar
1629; to the pcre.backtrack_limit for PCRE.
1630;mbstring.regex_retry_limit=1000000
1631
1632[gd]
1633; Tell the jpeg decode to ignore warnings and try to create
1634; a gd image. The warning will then be displayed as notices
1635; disabled by default
1636; https://php.net/gd.jpeg-ignore-warning
1637;gd.jpeg_ignore_warning = 1
1638
1639[exif]
1640; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS.
1641; With mbstring support this will automatically be converted into the encoding
1642; given by corresponding encode setting. When empty mbstring.internal_encoding
1643; is used. For the decode settings you can distinguish between motorola and
1644; intel byte order. A decode setting cannot be empty.
1645; https://php.net/exif.encode-unicode
1646;exif.encode_unicode = ISO-8859-15
1647
1648; https://php.net/exif.decode-unicode-motorola
1649;exif.decode_unicode_motorola = UCS-2BE
1650
1651; https://php.net/exif.decode-unicode-intel
1652;exif.decode_unicode_intel    = UCS-2LE
1653
1654; https://php.net/exif.encode-jis
1655;exif.encode_jis =
1656
1657; https://php.net/exif.decode-jis-motorola
1658;exif.decode_jis_motorola = JIS
1659
1660; https://php.net/exif.decode-jis-intel
1661;exif.decode_jis_intel    = JIS
1662
1663[Tidy]
1664; The path to a default tidy configuration file to use when using tidy
1665; https://php.net/tidy.default-config
1666;tidy.default_config = /usr/local/lib/php/default.tcfg
1667
1668; Should tidy clean and repair output automatically?
1669; WARNING: Do not use this option if you are generating non-html content
1670; such as dynamic images
1671; https://php.net/tidy.clean-output
1672tidy.clean_output = Off
1673
1674[soap]
1675; Enables or disables WSDL caching feature.
1676; https://php.net/soap.wsdl-cache-enabled
1677soap.wsdl_cache_enabled=1
1678
1679; Sets the directory name where SOAP extension will put cache files.
1680; https://php.net/soap.wsdl-cache-dir
1681soap.wsdl_cache_dir="/tmp"
1682
1683; (time to live) Sets the number of second while cached file will be used
1684; instead of original one.
1685; https://php.net/soap.wsdl-cache-ttl
1686soap.wsdl_cache_ttl=86400
1687
1688; Sets the size of the cache limit. (Max. number of WSDL files to cache)
1689soap.wsdl_cache_limit = 5
1690
1691[sysvshm]
1692; A default size of the shared memory segment
1693;sysvshm.init_mem = 10000
1694
1695[ldap]
1696; Sets the maximum number of open links or -1 for unlimited.
1697ldap.max_links = -1
1698
1699[dba]
1700;dba.default_handler=
1701
1702[opcache]
1703; Determines if Zend OPCache is enabled
1704;opcache.enable=1
1705
1706; Determines if Zend OPCache is enabled for the CLI version of PHP
1707;opcache.enable_cli=0
1708
1709; The OPcache shared memory storage size.
1710;opcache.memory_consumption=128
1711
1712; The amount of memory for interned strings in Mbytes.
1713;opcache.interned_strings_buffer=8
1714
1715; The maximum number of keys (scripts) in the OPcache hash table.
1716; Only numbers between 200 and 1000000 are allowed.
1717;opcache.max_accelerated_files=10000
1718
1719; The maximum percentage of "wasted" memory until a restart is scheduled.
1720;opcache.max_wasted_percentage=5
1721
1722; When this directive is enabled, the OPcache appends the current working
1723; directory to the script key, thus eliminating possible collisions between
1724; files with the same name (basename). Disabling the directive improves
1725; performance, but may break existing applications.
1726;opcache.use_cwd=1
1727
1728; When disabled, you must reset the OPcache manually or restart the
1729; webserver for changes to the filesystem to take effect.
1730;opcache.validate_timestamps=1
1731
1732; How often (in seconds) to check file timestamps for changes to the shared
1733; memory storage allocation. ("1" means validate once per second, but only
1734; once per request. "0" means always validate)
1735;opcache.revalidate_freq=2
1736
1737; Enables or disables file search in include_path optimization
1738;opcache.revalidate_path=0
1739
1740; If disabled, all PHPDoc comments are dropped from the code to reduce the
1741; size of the optimized code.
1742;opcache.save_comments=1
1743
1744; If enabled, compilation warnings (including notices and deprecations) will
1745; be recorded and replayed each time a file is included. Otherwise, compilation
1746; warnings will only be emitted when the file is first cached.
1747;opcache.record_warnings=0
1748
1749; Allow file existence override (file_exists, etc.) performance feature.
1750;opcache.enable_file_override=0
1751
1752; A bitmask, where each bit enables or disables the appropriate OPcache
1753; passes
1754;opcache.optimization_level=0x7FFFBFFF
1755
1756;opcache.dups_fix=0
1757
1758; The location of the OPcache blacklist file (wildcards allowed).
1759; Each OPcache blacklist file is a text file that holds the names of files
1760; that should not be accelerated. The file format is to add each filename
1761; to a new line. The filename may be a full path or just a file prefix
1762; (i.e., /var/www/x  blacklists all the files and directories in /var/www
1763; that start with 'x'). Line starting with a ; are ignored (comments).
1764;opcache.blacklist_filename=
1765
1766; Allows exclusion of large files from being cached. By default all files
1767; are cached.
1768;opcache.max_file_size=0
1769
1770; How long to wait (in seconds) for a scheduled restart to begin if the cache
1771; is not being accessed.
1772;opcache.force_restart_timeout=180
1773
1774; OPcache error_log file name. Empty string assumes "stderr".
1775;opcache.error_log=
1776
1777; All OPcache errors go to the Web server log.
1778; By default, only fatal errors (level 0) or errors (level 1) are logged.
1779; You can also enable warnings (level 2), info messages (level 3) or
1780; debug messages (level 4).
1781;opcache.log_verbosity_level=1
1782
1783; Preferred Shared Memory back-end. Leave empty and let the system decide.
1784;opcache.preferred_memory_model=
1785
1786; Protect the shared memory from unexpected writing during script execution.
1787; Useful for internal debugging only.
1788;opcache.protect_memory=0
1789
1790; Allows calling OPcache API functions only from PHP scripts which path is
1791; started from specified string. The default "" means no restriction
1792;opcache.restrict_api=
1793
1794; Mapping base of shared memory segments (for Windows only). All the PHP
1795; processes have to map shared memory into the same address space. This
1796; directive allows to manually fix the "Unable to reattach to base address"
1797; errors.
1798;opcache.mmap_base=
1799
1800; Facilitates multiple OPcache instances per user (for Windows only). All PHP
1801; processes with the same cache ID and user share an OPcache instance.
1802;opcache.cache_id=
1803
1804; Enables and sets the second level cache directory.
1805; It should improve performance when SHM memory is full, at server restart or
1806; SHM reset. The default "" disables file based caching.
1807;opcache.file_cache=
1808
1809; Enables or disables opcode caching in shared memory.
1810;opcache.file_cache_only=0
1811
1812; Enables or disables checksum validation when script loaded from file cache.
1813;opcache.file_cache_consistency_checks=1
1814
1815; Implies opcache.file_cache_only=1 for a certain process that failed to
1816; reattach to the shared memory (for Windows only). Explicitly enabled file
1817; cache is required.
1818;opcache.file_cache_fallback=1
1819
1820; Enables or disables copying of PHP code (text segment) into HUGE PAGES.
1821; Under certain circumstances (if only a single global PHP process is
1822; started from which all others fork), this can increase performance
1823; by a tiny amount because TLB misses are reduced.  On the other hand, this
1824; delays PHP startup, increases memory usage and degrades performance
1825; under memory pressure - use with care.
1826; Requires appropriate OS configuration.
1827;opcache.huge_code_pages=0
1828
1829; Validate cached file permissions.
1830;opcache.validate_permission=0
1831
1832; Prevent name collisions in chroot'ed environment.
1833;opcache.validate_root=0
1834
1835; If specified, it produces opcode dumps for debugging different stages of
1836; optimizations.
1837;opcache.opt_debug_level=0
1838
1839; Specifies a PHP script that is going to be compiled and executed at server
1840; start-up.
1841; https://php.net/opcache.preload
1842;opcache.preload=
1843
1844; Preloading code as root is not allowed for security reasons. This directive
1845; facilitates to let the preloading to be run as another user.
1846; https://php.net/opcache.preload_user
1847;opcache.preload_user=
1848
1849; Prevents caching files that are less than this number of seconds old. It
1850; protects from caching of incompletely updated files. In case all file updates
1851; on your site are atomic, you may increase performance by setting it to "0".
1852;opcache.file_update_protection=2
1853
1854; Absolute path used to store shared lockfiles (for *nix only).
1855;opcache.lockfile_path=/tmp
1856
1857[curl]
1858; A default value for the CURLOPT_CAINFO option. This is required to be an
1859; absolute path.
1860;curl.cainfo =
1861
1862[openssl]
1863; The location of a Certificate Authority (CA) file on the local filesystem
1864; to use when verifying the identity of SSL/TLS peers. Most users should
1865; not specify a value for this directive as PHP will attempt to use the
1866; OS-managed cert stores in its absence. If specified, this value may still
1867; be overridden on a per-stream basis via the "cafile" SSL stream context
1868; option.
1869;openssl.cafile=
1870
1871; If openssl.cafile is not specified or if the CA file is not found, the
1872; directory pointed to by openssl.capath is searched for a suitable
1873; certificate. This value must be a correctly hashed certificate directory.
1874; Most users should not specify a value for this directive as PHP will
1875; attempt to use the OS-managed cert stores in its absence. If specified,
1876; this value may still be overridden on a per-stream basis via the "capath"
1877; SSL stream context option.
1878;openssl.capath=
1879
1880[ffi]
1881; FFI API restriction. Possible values:
1882; "preload" - enabled in CLI scripts and preloaded files (default)
1883; "false"   - always disabled
1884; "true"    - always enabled
1885;ffi.enable=preload
1886
1887; List of headers files to preload, wildcard patterns allowed.
1888;ffi.preload=
1889