1[PHP] 2 3;;;;;;;;;;;;;;;;;;; 4; About php.ini ; 5;;;;;;;;;;;;;;;;;;; 6; PHP's initialization file, generally called php.ini, is responsible for 7; configuring many of the aspects of PHP's behavior. 8 9; PHP attempts to find and load this configuration from a number of locations. 10; The following is a summary of its search order: 11; 1. SAPI module specific location. 12; 2. The PHPRC environment variable. 13; 3. A number of predefined registry keys on Windows 14; 4. Current working directory (except CLI) 15; 5. The web server's directory (for SAPI modules), or directory of PHP 16; (otherwise in Windows) 17; 6. The directory from the --with-config-file-path compile time option, or the 18; Windows directory (usually C:\windows) 19; See the PHP docs for more specific information. 20; https://php.net/configuration.file 21 22; The syntax of the file is extremely simple. Whitespace and lines 23; beginning with a semicolon are silently ignored (as you probably guessed). 24; Section headers (e.g. [Foo]) are also silently ignored, even though 25; they might mean something in the future. 26 27; Directives following the section heading [PATH=/www/mysite] only 28; apply to PHP files in the /www/mysite directory. Directives 29; following the section heading [HOST=www.example.com] only apply to 30; PHP files served from www.example.com. Directives set in these 31; special sections cannot be overridden by user-defined INI files or 32; at runtime. Currently, [PATH=] and [HOST=] sections only work under 33; CGI/FastCGI. 34; https://php.net/ini.sections 35 36; Directives are specified using the following syntax: 37; directive = value 38; Directive names are *case sensitive* - foo=bar is different from FOO=bar. 39; Directives are variables used to configure PHP or PHP extensions. 40; There is no name validation. If PHP can't find an expected 41; directive because it is not set or is mistyped, a default value will be used. 42 43; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one 44; of the INI constants (On, Off, True, False, Yes, No and None) or an expression 45; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a 46; previously set variable or directive (e.g. ${foo}) 47 48; Expressions in the INI file are limited to bitwise operators and parentheses: 49; | bitwise OR 50; ^ bitwise XOR 51; & bitwise AND 52; ~ bitwise NOT 53; ! boolean NOT 54 55; Boolean flags can be turned on using the values 1, On, True or Yes. 56; They can be turned off using the values 0, Off, False or No. 57 58; An empty string can be denoted by simply not writing anything after the equal 59; sign, or by using the None keyword: 60 61; foo = ; sets foo to an empty string 62; foo = None ; sets foo to an empty string 63; foo = "None" ; sets foo to the string 'None' 64 65; If you use constants in your value, and these constants belong to a 66; dynamically loaded extension (either a PHP extension or a Zend extension), 67; you may only use these constants *after* the line that loads the extension. 68 69;;;;;;;;;;;;;;;;;;; 70; About this file ; 71;;;;;;;;;;;;;;;;;;; 72; PHP comes packaged with two INI files. One that is recommended to be used 73; in production environments and one that is recommended to be used in 74; development environments. 75 76; php.ini-production contains settings which hold security, performance and 77; best practices at its core. But please be aware, these settings may break 78; compatibility with older or less security-conscious applications. We 79; recommending using the production ini in production and testing environments. 80 81; php.ini-development is very similar to its production variant, except it is 82; much more verbose when it comes to errors. We recommend using the 83; development version only in development environments, as errors shown to 84; application users can inadvertently leak otherwise secure information. 85 86; This is the php.ini-development INI file. 87 88;;;;;;;;;;;;;;;;;;; 89; Quick Reference ; 90;;;;;;;;;;;;;;;;;;; 91 92; The following are all the settings which are different in either the production 93; or development versions of the INIs with respect to PHP's default behavior. 94; Please see the actual settings later in the document for more details as to why 95; we recommend these changes in PHP's behavior. 96 97; display_errors 98; Default Value: On 99; Development Value: On 100; Production Value: Off 101 102; display_startup_errors 103; Default Value: On 104; Development Value: On 105; Production Value: Off 106 107; error_reporting 108; Default Value: E_ALL 109; Development Value: E_ALL 110; Production Value: E_ALL & ~E_DEPRECATED 111 112; log_errors 113; Default Value: Off 114; Development Value: On 115; Production Value: On 116 117; max_input_time 118; Default Value: -1 (Unlimited) 119; Development Value: 60 (60 seconds) 120; Production Value: 60 (60 seconds) 121 122; output_buffering 123; Default Value: Off 124; Development Value: 4096 125; Production Value: 4096 126 127; register_argc_argv 128; Default Value: On 129; Development Value: Off 130; Production Value: Off 131 132; request_order 133; Default Value: None 134; Development Value: "GP" 135; Production Value: "GP" 136 137; session.gc_divisor 138; Default Value: 100 139; Development Value: 1000 140; Production Value: 1000 141 142; short_open_tag 143; Default Value: On 144; Development Value: Off 145; Production Value: Off 146 147; variables_order 148; Default Value: "EGPCS" 149; Development Value: "GPCS" 150; Production Value: "GPCS" 151 152; zend.assertions 153; Default Value: 1 154; Development Value: 1 155; Production Value: -1 156 157; zend.exception_ignore_args 158; Default Value: Off 159; Development Value: Off 160; Production Value: On 161 162; zend.exception_string_param_max_len 163; Default Value: 15 164; Development Value: 15 165; Production Value: 0 166 167;;;;;;;;;;;;;;;;;;;; 168; php.ini Options ; 169;;;;;;;;;;;;;;;;;;;; 170; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini" 171;user_ini.filename = ".user.ini" 172 173; To disable this feature set this option to an empty value 174;user_ini.filename = 175 176; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes) 177;user_ini.cache_ttl = 300 178 179;;;;;;;;;;;;;;;;;;;; 180; Language Options ; 181;;;;;;;;;;;;;;;;;;;; 182 183; Enable the PHP scripting language engine under Apache. 184; https://php.net/engine 185engine = On 186 187; This directive determines whether or not PHP will recognize code between 188; <? and ?> tags as PHP source which should be processed as such. It is 189; generally recommended that <?php and ?> should be used and that this feature 190; should be disabled, as enabling it may result in issues when generating XML 191; documents, however this remains supported for backward compatibility reasons. 192; Note that this directive does not control the <?= shorthand tag, which can be 193; used regardless of this directive. 194; Default Value: On 195; Development Value: Off 196; Production Value: Off 197; https://php.net/short-open-tag 198short_open_tag = Off 199 200; The number of significant digits displayed in floating point numbers. 201; https://php.net/precision 202precision = 14 203 204; Output buffering is a mechanism for controlling how much output data 205; (excluding headers and cookies) PHP should keep internally before pushing that 206; data to the client. If your application's output exceeds this setting, PHP 207; will send that data in chunks of roughly the size you specify. 208; Turning on this setting and managing its maximum buffer size can yield some 209; interesting side-effects depending on your application and web server. 210; You may be able to send headers and cookies after you've already sent output 211; through print or echo. You also may see performance benefits if your server is 212; emitting less packets due to buffered output versus PHP streaming the output 213; as it gets it. On production servers, 4096 bytes is a good setting for performance 214; reasons. 215; Note: Output buffering can also be controlled via Output Buffering Control 216; functions. 217; Possible Values: 218; On = Enabled and buffer is unlimited. (Use with caution) 219; Off = Disabled 220; Integer = Enables the buffer and sets its maximum size in bytes. 221; Note: This directive is hardcoded to Off for the CLI SAPI 222; Default Value: Off 223; Development Value: 4096 224; Production Value: 4096 225; https://php.net/output-buffering 226output_buffering = 4096 227 228; You can redirect all of the output of your scripts to a function. For 229; example, if you set output_handler to "mb_output_handler", character 230; encoding will be transparently converted to the specified encoding. 231; Setting any output handler automatically turns on output buffering. 232; Note: People who wrote portable scripts should not depend on this ini 233; directive. Instead, explicitly set the output handler using ob_start(). 234; Using this ini directive may cause problems unless you know what script 235; is doing. 236; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler" 237; and you cannot use both "ob_gzhandler" and "zlib.output_compression". 238; Note: output_handler must be empty if this is set 'On' !!!! 239; Instead you must use zlib.output_handler. 240; https://php.net/output-handler 241;output_handler = 242 243; URL rewriter function rewrites URL on the fly by using 244; output buffer. You can set target tags by this configuration. 245; "form" tag is special tag. It will add hidden input tag to pass values. 246; Refer to session.trans_sid_tags for usage. 247; Default Value: "form=" 248; Development Value: "form=" 249; Production Value: "form=" 250;url_rewriter.tags 251 252; URL rewriter will not rewrite absolute URL nor form by default. To enable 253; absolute URL rewrite, allowed hosts must be defined at RUNTIME. 254; Refer to session.trans_sid_hosts for more details. 255; Default Value: "" 256; Development Value: "" 257; Production Value: "" 258;url_rewriter.hosts 259 260; Transparent output compression using the zlib library 261; Valid values for this option are 'off', 'on', or a specific buffer size 262; to be used for compression (default is 4KB) 263; Note: Resulting chunk size may vary due to nature of compression. PHP 264; outputs chunks that are few hundreds bytes each as a result of 265; compression. If you prefer a larger chunk size for better 266; performance, enable output_buffering in addition. 267; Note: You need to use zlib.output_handler instead of the standard 268; output_handler, or otherwise the output will be corrupted. 269; https://php.net/zlib.output-compression 270zlib.output_compression = Off 271 272; https://php.net/zlib.output-compression-level 273;zlib.output_compression_level = -1 274 275; You cannot specify additional output handlers if zlib.output_compression 276; is activated here. This setting does the same as output_handler but in 277; a different order. 278; https://php.net/zlib.output-handler 279;zlib.output_handler = 280 281; Implicit flush tells PHP to tell the output layer to flush itself 282; automatically after every output block. This is equivalent to calling the 283; PHP function flush() after each and every call to print() or echo() and each 284; and every HTML block. Turning this option on has serious performance 285; implications and is generally recommended for debugging purposes only. 286; https://php.net/implicit-flush 287; Note: This directive is hardcoded to On for the CLI SAPI 288implicit_flush = Off 289 290; The unserialize callback function will be called (with the undefined class' 291; name as parameter), if the unserializer finds an undefined class 292; which should be instantiated. A warning appears if the specified function is 293; not defined, or if the function doesn't include/implement the missing class. 294; So only set this entry, if you really want to implement such a 295; callback-function. 296unserialize_callback_func = 297 298; The unserialize_max_depth specifies the default depth limit for unserialized 299; structures. Setting the depth limit too high may result in stack overflows 300; during unserialization. The unserialize_max_depth ini setting can be 301; overridden by the max_depth option on individual unserialize() calls. 302; A value of 0 disables the depth limit. 303;unserialize_max_depth = 4096 304 305; When floats & doubles are serialized, store serialize_precision significant 306; digits after the floating point. The default value ensures that when floats 307; are decoded with unserialize, the data will remain the same. 308; The value is also used for json_encode when encoding double values. 309; If -1 is used, then dtoa mode 0 is used which automatically select the best 310; precision. 311serialize_precision = -1 312 313; open_basedir, if set, limits all file operations to the defined directory 314; and below. This directive makes most sense if used in a per-directory 315; or per-virtualhost web server configuration file. 316; Note: disables the realpath cache 317; https://php.net/open-basedir 318;open_basedir = 319 320; This directive allows you to disable certain functions. 321; It receives a comma-delimited list of function names. 322; https://php.net/disable-functions 323disable_functions = 324 325; This directive allows you to disable certain classes. 326; It receives a comma-delimited list of class names. 327; https://php.net/disable-classes 328disable_classes = 329 330; Colors for Syntax Highlighting mode. Anything that's acceptable in 331; <span style="color: ???????"> would work. 332; https://php.net/syntax-highlighting 333;highlight.string = #DD0000 334;highlight.comment = #FF9900 335;highlight.keyword = #007700 336;highlight.default = #0000BB 337;highlight.html = #000000 338 339; If enabled, the request will be allowed to complete even if the user aborts 340; the request. Consider enabling it if executing long requests, which may end up 341; being interrupted by the user or a browser timing out. PHP's default behavior 342; is to disable this feature. 343; https://php.net/ignore-user-abort 344;ignore_user_abort = On 345 346; Determines the size of the realpath cache to be used by PHP. This value should 347; be increased on systems where PHP opens many files to reflect the quantity of 348; the file operations performed. 349; Note: if open_basedir is set, the cache is disabled 350; https://php.net/realpath-cache-size 351;realpath_cache_size = 4096k 352 353; Duration of time, in seconds for which to cache realpath information for a given 354; file or directory. For systems with rarely changing files, consider increasing this 355; value. 356; https://php.net/realpath-cache-ttl 357;realpath_cache_ttl = 120 358 359; Enables or disables the circular reference collector. 360; https://php.net/zend.enable-gc 361zend.enable_gc = On 362 363; If enabled, scripts may be written in encodings that are incompatible with 364; the scanner. CP936, Big5, CP949 and Shift_JIS are the examples of such 365; encodings. To use this feature, mbstring extension must be enabled. 366;zend.multibyte = Off 367 368; Allows to set the default encoding for the scripts. This value will be used 369; unless "declare(encoding=...)" directive appears at the top of the script. 370; Only affects if zend.multibyte is set. 371;zend.script_encoding = 372 373; Allows to include or exclude arguments from stack traces generated for exceptions. 374; In production, it is recommended to turn this setting on to prohibit the output 375; of sensitive information in stack traces 376; Default Value: Off 377; Development Value: Off 378; Production Value: On 379zend.exception_ignore_args = Off 380 381; Allows setting the maximum string length in an argument of a stringified stack trace 382; to a value between 0 and 1000000. 383; This has no effect when zend.exception_ignore_args is enabled. 384; Default Value: 15 385; Development Value: 15 386; Production Value: 0 387zend.exception_string_param_max_len = 15 388 389;;;;;;;;;;;;;;;;; 390; Miscellaneous ; 391;;;;;;;;;;;;;;;;; 392 393; Decides whether PHP may expose the fact that it is installed on the server 394; (e.g. by adding its signature to the Web server header). It is no security 395; threat in any way, but it makes it possible to determine whether you use PHP 396; on your server or not. 397; https://php.net/expose-php 398expose_php = On 399 400;;;;;;;;;;;;;;;;;;; 401; Resource Limits ; 402;;;;;;;;;;;;;;;;;;; 403 404; Maximum execution time of each script, in seconds 405; https://php.net/max-execution-time 406; Note: This directive is hardcoded to 0 for the CLI SAPI 407max_execution_time = 30 408 409; Maximum amount of time each script may spend parsing request data. It's a good 410; idea to limit this time on productions servers in order to eliminate unexpectedly 411; long running scripts. 412; Note: This directive is hardcoded to -1 for the CLI SAPI 413; Default Value: -1 (Unlimited) 414; Development Value: 60 (60 seconds) 415; Production Value: 60 (60 seconds) 416; https://php.net/max-input-time 417max_input_time = 60 418 419; Maximum input variable nesting level 420; https://php.net/max-input-nesting-level 421;max_input_nesting_level = 64 422 423; How many GET/POST/COOKIE input variables may be accepted 424;max_input_vars = 1000 425 426; How many multipart body parts (combined input variable and file uploads) may 427; be accepted. 428; Default Value: -1 (Sum of max_input_vars and max_file_uploads) 429;max_multipart_body_parts = 1500 430 431; Maximum amount of memory a script may consume 432; https://php.net/memory-limit 433memory_limit = 128M 434 435;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 436; Error handling and logging ; 437;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 438 439; This directive informs PHP of which errors, warnings and notices you would like 440; it to take action for. The recommended way of setting values for this 441; directive is through the use of the error level constants and bitwise 442; operators. The error level constants are below here for convenience as well as 443; some common settings and their meanings. 444; By default, PHP is set to take action on all errors, notices and warnings EXCEPT 445; those related to E_NOTICE, which together cover best practices and 446; recommended coding standards in PHP. For performance reasons, this is the 447; recommend error reporting setting. Your production server shouldn't be wasting 448; resources complaining about best practices and coding standards. That's what 449; development servers and development settings are for. 450; Note: The php.ini-development file has this setting as E_ALL. This 451; means it pretty much reports everything which is exactly what you want during 452; development and early testing. 453; 454; Error Level Constants: 455; E_ALL - All errors and warnings 456; E_ERROR - fatal run-time errors 457; E_RECOVERABLE_ERROR - almost fatal run-time errors 458; E_WARNING - run-time warnings (non-fatal errors) 459; E_PARSE - compile-time parse errors 460; E_NOTICE - run-time notices (these are warnings which often result 461; from a bug in your code, but it's possible that it was 462; intentional (e.g., using an uninitialized variable and 463; relying on the fact it is automatically initialized to an 464; empty string) 465; E_CORE_ERROR - fatal errors that occur during PHP's initial startup 466; E_CORE_WARNING - warnings (non-fatal errors) that occur during PHP's 467; initial startup 468; E_COMPILE_ERROR - fatal compile-time errors 469; E_COMPILE_WARNING - compile-time warnings (non-fatal errors) 470; E_USER_ERROR - user-generated error message 471; E_USER_WARNING - user-generated warning message 472; E_USER_NOTICE - user-generated notice message 473; E_DEPRECATED - warn about code that will not work in future versions 474; of PHP 475; E_USER_DEPRECATED - user-generated deprecation warnings 476; 477; Common Values: 478; E_ALL (Show all errors, warnings and notices including coding standards.) 479; E_ALL & ~E_NOTICE (Show all errors, except for notices) 480; E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR (Show only errors) 481; Default Value: E_ALL 482; Development Value: E_ALL 483; Production Value: E_ALL & ~E_DEPRECATED 484; https://php.net/error-reporting 485error_reporting = E_ALL 486 487; This directive controls whether or not and where PHP will output errors, 488; notices and warnings too. Error output is very useful during development, but 489; it could be very dangerous in production environments. Depending on the code 490; which is triggering the error, sensitive information could potentially leak 491; out of your application such as database usernames and passwords or worse. 492; For production environments, we recommend logging errors rather than 493; sending them to STDOUT. 494; Possible Values: 495; Off = Do not display any errors 496; stderr = Display errors to STDERR (affects only CGI/CLI binaries!) 497; On or stdout = Display errors to STDOUT 498; Default Value: On 499; Development Value: On 500; Production Value: Off 501; https://php.net/display-errors 502display_errors = On 503 504; The display of errors which occur during PHP's startup sequence are handled 505; separately from display_errors. We strongly recommend you set this to 'off' 506; for production servers to avoid leaking configuration details. 507; Default Value: On 508; Development Value: On 509; Production Value: Off 510; https://php.net/display-startup-errors 511display_startup_errors = On 512 513; Besides displaying errors, PHP can also log errors to locations such as a 514; server-specific log, STDERR, or a location specified by the error_log 515; directive found below. While errors should not be displayed on productions 516; servers they should still be monitored and logging is a great way to do that. 517; Default Value: Off 518; Development Value: On 519; Production Value: On 520; https://php.net/log-errors 521log_errors = On 522 523; Do not log repeated messages. Repeated errors must occur in same file on same 524; line unless ignore_repeated_source is set true. 525; https://php.net/ignore-repeated-errors 526ignore_repeated_errors = Off 527 528; Ignore source of message when ignoring repeated messages. When this setting 529; is On you will not log errors with repeated messages from different files or 530; source lines. 531; https://php.net/ignore-repeated-source 532ignore_repeated_source = Off 533 534; If this parameter is set to Off, then memory leaks will not be shown (on 535; stdout or in the log). This is only effective in a debug compile, and if 536; error reporting includes E_WARNING in the allowed list 537; https://php.net/report-memleaks 538report_memleaks = On 539 540; This setting is off by default. 541;report_zend_debug = 0 542 543; Turn off normal error reporting and emit XML-RPC error XML 544; https://php.net/xmlrpc-errors 545;xmlrpc_errors = 0 546 547; An XML-RPC faultCode 548;xmlrpc_error_number = 0 549 550; When PHP displays or logs an error, it has the capability of formatting the 551; error message as HTML for easier reading. This directive controls whether 552; the error message is formatted as HTML or not. 553; Note: This directive is hardcoded to Off for the CLI SAPI 554; https://php.net/html-errors 555;html_errors = On 556 557; If html_errors is set to On *and* docref_root is not empty, then PHP 558; produces clickable error messages that direct to a page describing the error 559; or function causing the error in detail. 560; You can download a copy of the PHP manual from https://php.net/docs 561; and change docref_root to the base URL of your local copy including the 562; leading '/'. You must also specify the file extension being used including 563; the dot. PHP's default behavior is to leave these settings empty, in which 564; case no links to documentation are generated. 565; Note: Never use this feature for production boxes. 566; https://php.net/docref-root 567; Examples 568;docref_root = "/phpmanual/" 569 570; https://php.net/docref-ext 571;docref_ext = .html 572 573; String to output before an error message. PHP's default behavior is to leave 574; this setting blank. 575; https://php.net/error-prepend-string 576; Example: 577;error_prepend_string = "<span style='color: #ff0000'>" 578 579; String to output after an error message. PHP's default behavior is to leave 580; this setting blank. 581; https://php.net/error-append-string 582; Example: 583;error_append_string = "</span>" 584 585; Log errors to specified file. PHP's default behavior is to leave this value 586; empty. 587; https://php.net/error-log 588; Example: 589;error_log = php_errors.log 590; Log errors to syslog (Event Log on Windows). 591;error_log = syslog 592 593; The syslog ident is a string which is prepended to every message logged 594; to syslog. Only used when error_log is set to syslog. 595;syslog.ident = php 596 597; The syslog facility is used to specify what type of program is logging 598; the message. Only used when error_log is set to syslog. 599;syslog.facility = user 600 601; Set this to disable filtering control characters (the default). 602; Some loggers only accept NVT-ASCII, others accept anything that's not 603; control characters. If your logger accepts everything, then no filtering 604; is needed at all. 605; Allowed values are: 606; ascii (all printable ASCII characters and NL) 607; no-ctrl (all characters except control characters) 608; all (all characters) 609; raw (like "all", but messages are not split at newlines) 610; https://php.net/syslog.filter 611;syslog.filter = ascii 612 613;windows.show_crt_warning 614; Default value: 0 615; Development value: 0 616; Production value: 0 617 618;;;;;;;;;;;;;;;;; 619; Data Handling ; 620;;;;;;;;;;;;;;;;; 621 622; The separator used in PHP generated URLs to separate arguments. 623; PHP's default setting is "&". 624; https://php.net/arg-separator.output 625; Example: 626;arg_separator.output = "&" 627 628; List of separator(s) used by PHP to parse input URLs into variables. 629; PHP's default setting is "&". 630; NOTE: Every character in this directive is considered as separator! 631; https://php.net/arg-separator.input 632; Example: 633;arg_separator.input = ";&" 634 635; This directive determines which super global arrays are registered when PHP 636; starts up. G,P,C,E & S are abbreviations for the following respective super 637; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty 638; paid for the registration of these arrays and because ENV is not as commonly 639; used as the others, ENV is not recommended on productions servers. You 640; can still get access to the environment variables through getenv() should you 641; need to. 642; Default Value: "EGPCS" 643; Development Value: "GPCS" 644; Production Value: "GPCS"; 645; https://php.net/variables-order 646variables_order = "GPCS" 647 648; This directive determines which super global data (G,P & C) should be 649; registered into the super global array REQUEST. If so, it also determines 650; the order in which that data is registered. The values for this directive 651; are specified in the same manner as the variables_order directive, 652; EXCEPT one. Leaving this value empty will cause PHP to use the value set 653; in the variables_order directive. It does not mean it will leave the super 654; globals array REQUEST empty. 655; Default Value: None 656; Development Value: "GP" 657; Production Value: "GP" 658; https://php.net/request-order 659request_order = "GP" 660 661; This directive determines whether PHP registers $argv & $argc each time it 662; runs. $argv contains an array of all the arguments passed to PHP when a script 663; is invoked. $argc contains an integer representing the number of arguments 664; that were passed when the script was invoked. These arrays are extremely 665; useful when running scripts from the command line. When this directive is 666; enabled, registering these variables consumes CPU cycles and memory each time 667; a script is executed. For performance reasons, this feature should be disabled 668; on production servers. 669; Note: This directive is hardcoded to On for the CLI SAPI 670; Default Value: On 671; Development Value: Off 672; Production Value: Off 673; https://php.net/register-argc-argv 674register_argc_argv = Off 675 676; When enabled, the ENV, REQUEST and SERVER variables are created when they're 677; first used (Just In Time) instead of when the script starts. If these 678; variables are not used within a script, having this directive on will result 679; in a performance gain. The PHP directive register_argc_argv must be disabled 680; for this directive to have any effect. 681; https://php.net/auto-globals-jit 682auto_globals_jit = On 683 684; Whether PHP will read the POST data. 685; This option is enabled by default. 686; Most likely, you won't want to disable this option globally. It causes $_POST 687; and $_FILES to always be empty; the only way you will be able to read the 688; POST data will be through the php://input stream wrapper. This can be useful 689; to proxy requests or to process the POST data in a memory efficient fashion. 690; https://php.net/enable-post-data-reading 691;enable_post_data_reading = Off 692 693; Maximum size of POST data that PHP will accept. 694; Its value may be 0 to disable the limit. It is ignored if POST data reading 695; is disabled through enable_post_data_reading. 696; https://php.net/post-max-size 697post_max_size = 8M 698 699; Automatically add files before PHP document. 700; https://php.net/auto-prepend-file 701auto_prepend_file = 702 703; Automatically add files after PHP document. 704; https://php.net/auto-append-file 705auto_append_file = 706 707; By default, PHP will output a media type using the Content-Type header. To 708; disable this, simply set it to be empty. 709; 710; PHP's built-in default media type is set to text/html. 711; https://php.net/default-mimetype 712default_mimetype = "text/html" 713 714; PHP's default character set is set to UTF-8. 715; https://php.net/default-charset 716default_charset = "UTF-8" 717 718; PHP internal character encoding is set to empty. 719; If empty, default_charset is used. 720; https://php.net/internal-encoding 721;internal_encoding = 722 723; PHP input character encoding is set to empty. 724; If empty, default_charset is used. 725; https://php.net/input-encoding 726;input_encoding = 727 728; PHP output character encoding is set to empty. 729; If empty, default_charset is used. 730; See also output_buffer. 731; https://php.net/output-encoding 732;output_encoding = 733 734;;;;;;;;;;;;;;;;;;;;;;;;; 735; Paths and Directories ; 736;;;;;;;;;;;;;;;;;;;;;;;;; 737 738; UNIX: "/path1:/path2" 739;include_path = ".:/php/includes" 740; 741; Windows: "\path1;\path2" 742;include_path = ".;c:\php\includes" 743; 744; PHP's default setting for include_path is ".;/path/to/php/pear" 745; https://php.net/include-path 746 747; The root of the PHP pages, used only if nonempty. 748; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root 749; if you are running php as a CGI under any web server (other than IIS) 750; see documentation for security issues. The alternate is to use the 751; cgi.force_redirect configuration below 752; https://php.net/doc-root 753doc_root = 754 755; The directory under which PHP opens the script using /~username used only 756; if nonempty. 757; https://php.net/user-dir 758user_dir = 759 760; Directory in which the loadable extensions (modules) reside. 761; https://php.net/extension-dir 762;extension_dir = "./" 763; On windows: 764;extension_dir = "ext" 765 766; Directory where the temporary files should be placed. 767; Defaults to the system default (see sys_get_temp_dir) 768;sys_temp_dir = "/tmp" 769 770; Whether or not to enable the dl() function. The dl() function does NOT work 771; properly in multithreaded servers, such as IIS or Zeus, and is automatically 772; disabled on them. 773; https://php.net/enable-dl 774enable_dl = Off 775 776; cgi.force_redirect is necessary to provide security running PHP as a CGI under 777; most web servers. Left undefined, PHP turns this on by default. You can 778; turn it off here AT YOUR OWN RISK 779; **You CAN safely turn this off for IIS, in fact, you MUST.** 780; https://php.net/cgi.force-redirect 781;cgi.force_redirect = 1 782 783; if cgi.nph is enabled it will force cgi to always sent Status: 200 with 784; every request. PHP's default behavior is to disable this feature. 785;cgi.nph = 1 786 787; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape 788; (iPlanet) web servers, you MAY need to set an environment variable name that PHP 789; will look for to know it is OK to continue execution. Setting this variable MAY 790; cause security issues, KNOW WHAT YOU ARE DOING FIRST. 791; https://php.net/cgi.redirect-status-env 792;cgi.redirect_status_env = 793 794; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's 795; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok 796; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting 797; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting 798; of zero causes PHP to behave as before. Default is 1. You should fix your scripts 799; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. 800; https://php.net/cgi.fix-pathinfo 801;cgi.fix_pathinfo=1 802 803; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside 804; of the web tree and people will not be able to circumvent .htaccess security. 805;cgi.discard_path=1 806 807; FastCGI under IIS supports the ability to impersonate 808; security tokens of the calling client. This allows IIS to define the 809; security context that the request runs under. mod_fastcgi under Apache 810; does not currently support this feature (03/17/2002) 811; Set to 1 if running under IIS. Default is zero. 812; https://php.net/fastcgi.impersonate 813;fastcgi.impersonate = 1 814 815; Disable logging through FastCGI connection. PHP's default behavior is to enable 816; this feature. 817;fastcgi.logging = 0 818 819; cgi.rfc2616_headers configuration option tells PHP what type of headers to 820; use when sending HTTP response code. If set to 0, PHP sends Status: header that 821; is supported by Apache. When this option is set to 1, PHP will send 822; RFC2616 compliant header. 823; Default is zero. 824; https://php.net/cgi.rfc2616-headers 825;cgi.rfc2616_headers = 0 826 827; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #! 828; (shebang) at the top of the running script. This line might be needed if the 829; script support running both as stand-alone script and via PHP CGI<. PHP in CGI 830; mode skips this line and ignores its content if this directive is turned on. 831; https://php.net/cgi.check-shebang-line 832;cgi.check_shebang_line=1 833 834;;;;;;;;;;;;;;;; 835; File Uploads ; 836;;;;;;;;;;;;;;;; 837 838; Whether to allow HTTP file uploads. 839; https://php.net/file-uploads 840file_uploads = On 841 842; Temporary directory for HTTP uploaded files (will use system default if not 843; specified). 844; https://php.net/upload-tmp-dir 845;upload_tmp_dir = 846 847; Maximum allowed size for uploaded files. 848; https://php.net/upload-max-filesize 849upload_max_filesize = 2M 850 851; Maximum number of files that can be uploaded via a single request 852max_file_uploads = 20 853 854;;;;;;;;;;;;;;;;;; 855; Fopen wrappers ; 856;;;;;;;;;;;;;;;;;; 857 858; Whether to allow the treatment of URLs (like http:// or ftp://) as files. 859; https://php.net/allow-url-fopen 860allow_url_fopen = On 861 862; Whether to allow include/require to open URLs (like https:// or ftp://) as files. 863; https://php.net/allow-url-include 864allow_url_include = Off 865 866; Define the anonymous ftp password (your email address). PHP's default setting 867; for this is empty. 868; https://php.net/from 869;from="john@doe.com" 870 871; Define the User-Agent string. PHP's default setting for this is empty. 872; https://php.net/user-agent 873;user_agent="PHP" 874 875; Default timeout for socket based streams (seconds) 876; https://php.net/default-socket-timeout 877default_socket_timeout = 60 878 879; If your scripts have to deal with files from Macintosh systems, 880; or you are running on a Mac and need to deal with files from 881; unix or win32 systems, setting this flag will cause PHP to 882; automatically detect the EOL character in those files so that 883; fgets() and file() will work regardless of the source of the file. 884; https://php.net/auto-detect-line-endings 885;auto_detect_line_endings = Off 886 887;;;;;;;;;;;;;;;;;;;;;; 888; Dynamic Extensions ; 889;;;;;;;;;;;;;;;;;;;;;; 890 891; If you wish to have an extension loaded automatically, use the following 892; syntax: 893; 894; extension=modulename 895; 896; For example: 897; 898; extension=mysqli 899; 900; When the extension library to load is not located in the default extension 901; directory, You may specify an absolute path to the library file: 902; 903; extension=/path/to/extension/mysqli.so 904; 905; Note : The syntax used in previous PHP versions ('extension=<ext>.so' and 906; 'extension='php_<ext>.dll') is supported for legacy reasons and may be 907; deprecated in a future PHP major version. So, when it is possible, please 908; move to the new ('extension=<ext>) syntax. 909; 910; Notes for Windows environments : 911; 912; - Many DLL files are located in the ext/ 913; extension folders as well as the separate PECL DLL download. 914; Be sure to appropriately set the extension_dir directive. 915; 916;extension=bz2 917;extension=curl 918;extension=exif 919;extension=ffi 920;extension=ftp 921;extension=fileinfo 922;extension=gd 923;extension=gettext 924;extension=gmp 925;extension=intl 926;extension=ldap 927;extension=mbstring 928;extension=mysqli 929;extension=odbc 930;extension=openssl 931;extension=pdo_firebird 932;extension=pdo_mysql 933;extension=pdo_odbc 934;extension=pdo_pgsql 935;extension=pdo_sqlite 936;extension=pgsql 937;extension=shmop 938 939; The MIBS data available in the PHP distribution must be installed. 940; See https://www.php.net/manual/en/snmp.installation.php 941;extension=snmp 942 943;extension=soap 944;extension=sockets 945;extension=sodium 946;extension=sqlite3 947;extension=tidy 948;extension=xsl 949;extension=zip 950 951;zend_extension=opcache 952 953;;;;;;;;;;;;;;;;;;; 954; Module Settings ; 955;;;;;;;;;;;;;;;;;;; 956 957[CLI Server] 958; Whether the CLI web server uses ANSI color coding in its terminal output. 959cli_server.color = On 960 961[Date] 962; Defines the default timezone used by the date functions 963; https://php.net/date.timezone 964;date.timezone = 965 966; https://php.net/date.default-latitude 967;date.default_latitude = 31.7667 968 969; https://php.net/date.default-longitude 970;date.default_longitude = 35.2333 971 972; https://php.net/date.sunrise-zenith 973;date.sunrise_zenith = 90.833333 974 975; https://php.net/date.sunset-zenith 976;date.sunset_zenith = 90.833333 977 978[filter] 979; https://php.net/filter.default 980;filter.default = unsafe_raw 981 982; https://php.net/filter.default-flags 983;filter.default_flags = 984 985[iconv] 986; Use of this INI entry is deprecated, use global input_encoding instead. 987; If empty, default_charset or input_encoding or iconv.input_encoding is used. 988; The precedence is: default_charset < input_encoding < iconv.input_encoding 989;iconv.input_encoding = 990 991; Use of this INI entry is deprecated, use global internal_encoding instead. 992; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 993; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 994;iconv.internal_encoding = 995 996; Use of this INI entry is deprecated, use global output_encoding instead. 997; If empty, default_charset or output_encoding or iconv.output_encoding is used. 998; The precedence is: default_charset < output_encoding < iconv.output_encoding 999; To use an output encoding conversion, iconv's output handler must be set 1000; otherwise output encoding conversion cannot be performed. 1001;iconv.output_encoding = 1002 1003[intl] 1004;intl.default_locale = 1005; This directive allows you to produce PHP errors when some error 1006; happens within intl functions. The value is the level of the error produced. 1007; Default is 0, which does not produce any errors. 1008;intl.error_level = E_WARNING 1009;intl.use_exceptions = 0 1010 1011[sqlite3] 1012; Directory pointing to SQLite3 extensions 1013; https://php.net/sqlite3.extension-dir 1014;sqlite3.extension_dir = 1015 1016; SQLite defensive mode flag (only available from SQLite 3.26+) 1017; When the defensive flag is enabled, language features that allow ordinary 1018; SQL to deliberately corrupt the database file are disabled. This forbids 1019; writing directly to the schema, shadow tables (eg. FTS data tables), or 1020; the sqlite_dbpage virtual table. 1021; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html 1022; (for older SQLite versions, this flag has no use) 1023;sqlite3.defensive = 1 1024 1025[Pcre] 1026; PCRE library backtracking limit. 1027; https://php.net/pcre.backtrack-limit 1028;pcre.backtrack_limit=100000 1029 1030; PCRE library recursion limit. 1031; Please note that if you set this value to a high number you may consume all 1032; the available process stack and eventually crash PHP (due to reaching the 1033; stack size limit imposed by the Operating System). 1034; https://php.net/pcre.recursion-limit 1035;pcre.recursion_limit=100000 1036 1037; Enables or disables JIT compilation of patterns. This requires the PCRE 1038; library to be compiled with JIT support. 1039;pcre.jit=1 1040 1041[Pdo] 1042; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off" 1043; https://php.net/pdo-odbc.connection-pooling 1044;pdo_odbc.connection_pooling=strict 1045 1046[Pdo_mysql] 1047; Default socket name for local MySQL connects. If empty, uses the built-in 1048; MySQL defaults. 1049pdo_mysql.default_socket= 1050 1051[Phar] 1052; https://php.net/phar.readonly 1053;phar.readonly = On 1054 1055; https://php.net/phar.require-hash 1056;phar.require_hash = On 1057 1058;phar.cache_list = 1059 1060[mail function] 1061; For Win32 only. 1062; https://php.net/smtp 1063SMTP = localhost 1064; https://php.net/smtp-port 1065smtp_port = 25 1066 1067; For Win32 only. 1068; https://php.net/sendmail-from 1069;sendmail_from = me@example.com 1070 1071; For Unix only. You may supply arguments as well (default: "sendmail -t -i"). 1072; https://php.net/sendmail-path 1073;sendmail_path = 1074 1075; Force the addition of the specified parameters to be passed as extra parameters 1076; to the sendmail binary. These parameters will always replace the value of 1077; the 5th parameter to mail(). 1078;mail.force_extra_parameters = 1079 1080; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename 1081mail.add_x_header = Off 1082 1083; Use mixed LF and CRLF line separators to keep compatibility with some 1084; RFC 2822 non conformant MTA. 1085mail.mixed_lf_and_crlf = Off 1086 1087; The path to a log file that will log all mail() calls. Log entries include 1088; the full path of the script, line number, To address and headers. 1089;mail.log = 1090; Log mail to syslog (Event Log on Windows). 1091;mail.log = syslog 1092 1093[ODBC] 1094; https://php.net/odbc.default-db 1095;odbc.default_db = Not yet implemented 1096 1097; https://php.net/odbc.default-user 1098;odbc.default_user = Not yet implemented 1099 1100; https://php.net/odbc.default-pw 1101;odbc.default_pw = Not yet implemented 1102 1103; Controls the ODBC cursor model. 1104; Default: SQL_CURSOR_STATIC (default). 1105;odbc.default_cursortype 1106 1107; Allow or prevent persistent links. 1108; https://php.net/odbc.allow-persistent 1109odbc.allow_persistent = On 1110 1111; Check that a connection is still valid before reuse. 1112; https://php.net/odbc.check-persistent 1113odbc.check_persistent = On 1114 1115; Maximum number of persistent links. -1 means no limit. 1116; https://php.net/odbc.max-persistent 1117odbc.max_persistent = -1 1118 1119; Maximum number of links (persistent + non-persistent). -1 means no limit. 1120; https://php.net/odbc.max-links 1121odbc.max_links = -1 1122 1123; Handling of LONG fields. Returns number of bytes to variables. 0 means 1124; passthru. 1125; https://php.net/odbc.defaultlrl 1126odbc.defaultlrl = 4096 1127 1128; Handling of binary data. 0 means passthru, 1 return as is, 2 convert to char. 1129; See the documentation on odbc_binmode and odbc_longreadlen for an explanation 1130; of odbc.defaultlrl and odbc.defaultbinmode 1131; https://php.net/odbc.defaultbinmode 1132odbc.defaultbinmode = 1 1133 1134[MySQLi] 1135 1136; Maximum number of persistent links. -1 means no limit. 1137; https://php.net/mysqli.max-persistent 1138mysqli.max_persistent = -1 1139 1140; Allow accessing, from PHP's perspective, local files with LOAD DATA statements 1141; https://php.net/mysqli.allow_local_infile 1142;mysqli.allow_local_infile = On 1143 1144; It allows the user to specify a folder where files that can be sent via LOAD DATA 1145; LOCAL can exist. It is ignored if mysqli.allow_local_infile is enabled. 1146;mysqli.local_infile_directory = 1147 1148; Allow or prevent persistent links. 1149; https://php.net/mysqli.allow-persistent 1150mysqli.allow_persistent = On 1151 1152; Maximum number of links. -1 means no limit. 1153; https://php.net/mysqli.max-links 1154mysqli.max_links = -1 1155 1156; Default port number for mysqli_connect(). If unset, mysqli_connect() will use 1157; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the 1158; compile-time value defined MYSQL_PORT (in that order). Win32 will only look 1159; at MYSQL_PORT. 1160; https://php.net/mysqli.default-port 1161mysqli.default_port = 3306 1162 1163; Default socket name for local MySQL connects. If empty, uses the built-in 1164; MySQL defaults. 1165; https://php.net/mysqli.default-socket 1166mysqli.default_socket = 1167 1168; Default host for mysqli_connect() (doesn't apply in safe mode). 1169; https://php.net/mysqli.default-host 1170mysqli.default_host = 1171 1172; Default user for mysqli_connect() (doesn't apply in safe mode). 1173; https://php.net/mysqli.default-user 1174mysqli.default_user = 1175 1176; Default password for mysqli_connect() (doesn't apply in safe mode). 1177; Note that this is generally a *bad* idea to store passwords in this file. 1178; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw") 1179; and reveal this password! And of course, any users with read access to this 1180; file will be able to reveal the password as well. 1181; https://php.net/mysqli.default-pw 1182mysqli.default_pw = 1183 1184; If this option is enabled, closing a persistent connection will rollback 1185; any pending transactions of this connection, before it is put back 1186; into the persistent connection pool. 1187;mysqli.rollback_on_cached_plink = Off 1188 1189[mysqlnd] 1190; Enable / Disable collection of general statistics by mysqlnd which can be 1191; used to tune and monitor MySQL operations. 1192mysqlnd.collect_statistics = On 1193 1194; Enable / Disable collection of memory usage statistics by mysqlnd which can be 1195; used to tune and monitor MySQL operations. 1196mysqlnd.collect_memory_statistics = On 1197 1198; Records communication from all extensions using mysqlnd to the specified log 1199; file. 1200; https://php.net/mysqlnd.debug 1201;mysqlnd.debug = 1202 1203; Defines which queries will be logged. 1204;mysqlnd.log_mask = 0 1205 1206; Default size of the mysqlnd memory pool, which is used by result sets. 1207;mysqlnd.mempool_default_size = 16000 1208 1209; Size of a pre-allocated buffer used when sending commands to MySQL in bytes. 1210;mysqlnd.net_cmd_buffer_size = 2048 1211 1212; Size of a pre-allocated buffer used for reading data sent by the server in 1213; bytes. 1214;mysqlnd.net_read_buffer_size = 32768 1215 1216; Timeout for network requests in seconds. 1217;mysqlnd.net_read_timeout = 31536000 1218 1219; SHA-256 Authentication Plugin related. File with the MySQL server public RSA 1220; key. 1221;mysqlnd.sha256_server_public_key = 1222 1223[PostgreSQL] 1224; Allow or prevent persistent links. 1225; https://php.net/pgsql.allow-persistent 1226pgsql.allow_persistent = On 1227 1228; Detect broken persistent links always with pg_pconnect(). 1229; Auto reset feature requires a little overheads. 1230; https://php.net/pgsql.auto-reset-persistent 1231pgsql.auto_reset_persistent = Off 1232 1233; Maximum number of persistent links. -1 means no limit. 1234; https://php.net/pgsql.max-persistent 1235pgsql.max_persistent = -1 1236 1237; Maximum number of links (persistent+non persistent). -1 means no limit. 1238; https://php.net/pgsql.max-links 1239pgsql.max_links = -1 1240 1241; Ignore PostgreSQL backends Notice message or not. 1242; Notice message logging require a little overheads. 1243; https://php.net/pgsql.ignore-notice 1244pgsql.ignore_notice = 0 1245 1246; Log PostgreSQL backends Notice message or not. 1247; Unless pgsql.ignore_notice=0, module cannot log notice message. 1248; https://php.net/pgsql.log-notice 1249pgsql.log_notice = 0 1250 1251[bcmath] 1252; Number of decimal digits for all bcmath functions. 1253; https://php.net/bcmath.scale 1254bcmath.scale = 0 1255 1256[browscap] 1257; https://php.net/browscap 1258;browscap = extra/browscap.ini 1259 1260[Session] 1261; Handler used to store/retrieve data. 1262; https://php.net/session.save-handler 1263session.save_handler = files 1264 1265; Argument passed to save_handler. In the case of files, this is the path 1266; where data files are stored. Note: Windows users have to change this 1267; variable in order to use PHP's session functions. 1268; 1269; The path can be defined as: 1270; 1271; session.save_path = "N;/path" 1272; 1273; where N is an integer. Instead of storing all the session files in 1274; /path, what this will do is use subdirectories N-levels deep, and 1275; store the session data in those directories. This is useful if 1276; your OS has problems with many files in one directory, and is 1277; a more efficient layout for servers that handle many sessions. 1278; 1279; NOTE 1: PHP will not create this directory structure automatically. 1280; You can use the script in the ext/session dir for that purpose. 1281; NOTE 2: See the section on garbage collection below if you choose to 1282; use subdirectories for session storage 1283; 1284; The file storage module creates files using mode 600 by default. 1285; You can change that by using 1286; 1287; session.save_path = "N;MODE;/path" 1288; 1289; where MODE is the octal representation of the mode. Note that this 1290; does not overwrite the process's umask. 1291; https://php.net/session.save-path 1292;session.save_path = "/tmp" 1293 1294; Whether to use strict session mode. 1295; Strict session mode does not accept an uninitialized session ID, and 1296; regenerates the session ID if the browser sends an uninitialized session ID. 1297; Strict mode protects applications from session fixation via a session adoption 1298; vulnerability. It is disabled by default for maximum compatibility, but 1299; enabling it is encouraged. 1300; https://wiki.php.net/rfc/strict_sessions 1301session.use_strict_mode = 0 1302 1303; Whether to use cookies. 1304; https://php.net/session.use-cookies 1305session.use_cookies = 1 1306 1307; https://php.net/session.cookie-secure 1308;session.cookie_secure = 1309 1310; This option forces PHP to fetch and use a cookie for storing and maintaining 1311; the session id. We encourage this operation as it's very helpful in combating 1312; session hijacking when not specifying and managing your own session id. It is 1313; not the be-all and end-all of session hijacking defense, but it's a good start. 1314; https://php.net/session.use-only-cookies 1315session.use_only_cookies = 1 1316 1317; Name of the session (used as cookie name). 1318; https://php.net/session.name 1319session.name = PHPSESSID 1320 1321; Initialize session on request startup. 1322; https://php.net/session.auto-start 1323session.auto_start = 0 1324 1325; Lifetime in seconds of cookie or, if 0, until browser is restarted. 1326; https://php.net/session.cookie-lifetime 1327session.cookie_lifetime = 0 1328 1329; The path for which the cookie is valid. 1330; https://php.net/session.cookie-path 1331session.cookie_path = / 1332 1333; The domain for which the cookie is valid. 1334; https://php.net/session.cookie-domain 1335session.cookie_domain = 1336 1337; Whether or not to add the httpOnly flag to the cookie, which makes it 1338; inaccessible to browser scripting languages such as JavaScript. 1339; https://php.net/session.cookie-httponly 1340session.cookie_httponly = 1341 1342; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) 1343; Current valid values are "Strict", "Lax" or "None". When using "None", 1344; make sure to include the quotes, as `none` is interpreted like `false` in ini files. 1345; https://tools.ietf.org/html/draft-west-first-party-cookies-07 1346session.cookie_samesite = 1347 1348; Handler used to serialize data. php is the standard serializer of PHP. 1349; https://php.net/session.serialize-handler 1350session.serialize_handler = php 1351 1352; Defines the probability that the 'garbage collection' process is started on every 1353; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1354; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1355; Default Value: 1 1356; Development Value: 1 1357; Production Value: 1 1358; https://php.net/session.gc-probability 1359session.gc_probability = 1 1360 1361; Defines the probability that the 'garbage collection' process is started on every 1362; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1363; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1364; For high volume production servers, using a value of 1000 is a more efficient approach. 1365; Default Value: 100 1366; Development Value: 1000 1367; Production Value: 1000 1368; https://php.net/session.gc-divisor 1369session.gc_divisor = 1000 1370 1371; After this number of seconds, stored data will be seen as 'garbage' and 1372; cleaned up by the garbage collection process. 1373; https://php.net/session.gc-maxlifetime 1374session.gc_maxlifetime = 1440 1375 1376; NOTE: If you are using the subdirectory option for storing session files 1377; (see session.save_path above), then garbage collection does *not* 1378; happen automatically. You will need to do your own garbage 1379; collection through a shell script, cron entry, or some other method. 1380; For example, the following script is the equivalent of setting 1381; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): 1382; find /path/to/sessions -cmin +24 -type f | xargs rm 1383 1384; Check HTTP Referer to invalidate externally stored URLs containing ids. 1385; HTTP_REFERER has to contain this substring for the session to be 1386; considered as valid. 1387; https://php.net/session.referer-check 1388session.referer_check = 1389 1390; Set to {nocache,private,public,} to determine HTTP caching aspects 1391; or leave this empty to avoid sending anti-caching headers. 1392; https://php.net/session.cache-limiter 1393session.cache_limiter = nocache 1394 1395; Document expires after n minutes. 1396; https://php.net/session.cache-expire 1397session.cache_expire = 180 1398 1399; trans sid support is disabled by default. 1400; Use of trans sid may risk your users' security. 1401; Use this option with caution. 1402; - User may send URL contains active session ID 1403; to other person via. email/irc/etc. 1404; - URL that contains active session ID may be stored 1405; in publicly accessible computer. 1406; - User may access your site with the same session ID 1407; always using URL stored in browser's history or bookmarks. 1408; https://php.net/session.use-trans-sid 1409session.use_trans_sid = 0 1410 1411; The URL rewriter will look for URLs in a defined set of HTML tags. 1412; <form> is special; if you include them here, the rewriter will 1413; add a hidden <input> field with the info which is otherwise appended 1414; to URLs. <form> tag's action attribute URL will not be modified 1415; unless it is specified. 1416; Note that all valid entries require a "=", even if no value follows. 1417; Default Value: "a=href,area=href,frame=src,form=" 1418; Development Value: "a=href,area=href,frame=src,form=" 1419; Production Value: "a=href,area=href,frame=src,form=" 1420; https://php.net/url-rewriter.tags 1421session.trans_sid_tags = "a=href,area=href,frame=src,form=" 1422 1423; URL rewriter does not rewrite absolute URLs by default. 1424; To enable rewrites for absolute paths, target hosts must be specified 1425; at RUNTIME. i.e. use ini_set() 1426; <form> tags is special. PHP will check action attribute's URL regardless 1427; of session.trans_sid_tags setting. 1428; If no host is defined, HTTP_HOST will be used for allowed host. 1429; Example value: php.net,www.php.net,wiki.php.net 1430; Use "," for multiple hosts. No spaces are allowed. 1431; Default Value: "" 1432; Development Value: "" 1433; Production Value: "" 1434;session.trans_sid_hosts="" 1435 1436; Enable upload progress tracking in $_SESSION 1437; Default Value: On 1438; Development Value: On 1439; Production Value: On 1440; https://php.net/session.upload-progress.enabled 1441;session.upload_progress.enabled = On 1442 1443; Cleanup the progress information as soon as all POST data has been read 1444; (i.e. upload completed). 1445; Default Value: On 1446; Development Value: On 1447; Production Value: On 1448; https://php.net/session.upload-progress.cleanup 1449;session.upload_progress.cleanup = On 1450 1451; A prefix used for the upload progress key in $_SESSION 1452; Default Value: "upload_progress_" 1453; Development Value: "upload_progress_" 1454; Production Value: "upload_progress_" 1455; https://php.net/session.upload-progress.prefix 1456;session.upload_progress.prefix = "upload_progress_" 1457 1458; The index name (concatenated with the prefix) in $_SESSION 1459; containing the upload progress information 1460; Default Value: "PHP_SESSION_UPLOAD_PROGRESS" 1461; Development Value: "PHP_SESSION_UPLOAD_PROGRESS" 1462; Production Value: "PHP_SESSION_UPLOAD_PROGRESS" 1463; https://php.net/session.upload-progress.name 1464;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS" 1465 1466; How frequently the upload progress should be updated. 1467; Given either in percentages (per-file), or in bytes 1468; Default Value: "1%" 1469; Development Value: "1%" 1470; Production Value: "1%" 1471; https://php.net/session.upload-progress.freq 1472;session.upload_progress.freq = "1%" 1473 1474; The minimum delay between updates, in seconds 1475; Default Value: 1 1476; Development Value: 1 1477; Production Value: 1 1478; https://php.net/session.upload-progress.min-freq 1479;session.upload_progress.min_freq = "1" 1480 1481; Only write session data when session data is changed. Enabled by default. 1482; https://php.net/session.lazy-write 1483;session.lazy_write = On 1484 1485[Assertion] 1486; Switch whether to compile assertions at all (to have no overhead at run-time) 1487; -1: Do not compile at all 1488; 0: Jump over assertion at run-time 1489; 1: Execute assertions 1490; Changing from or to a negative value is only possible in php.ini! 1491; (For turning assertions on and off at run-time, toggle zend.assertions between the values 1 and 0) 1492; Default Value: 1 1493; Development Value: 1 1494; Production Value: -1 1495; https://php.net/zend.assertions 1496zend.assertions = 1 1497 1498[COM] 1499; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs 1500; https://php.net/com.typelib-file 1501;com.typelib_file = 1502 1503; allow Distributed-COM calls 1504; https://php.net/com.allow-dcom 1505;com.allow_dcom = true 1506 1507; autoregister constants of a component's typelib on com_load() 1508; https://php.net/com.autoregister-typelib 1509;com.autoregister_typelib = true 1510 1511; register constants casesensitive 1512; https://php.net/com.autoregister-casesensitive 1513;com.autoregister_casesensitive = false 1514 1515; show warnings on duplicate constant registrations 1516; https://php.net/com.autoregister-verbose 1517;com.autoregister_verbose = true 1518 1519; The default character set code-page to use when passing strings to and from COM objects. 1520; Default: system ANSI code page 1521;com.code_page= 1522 1523; The version of the .NET framework to use. The value of the setting are the first three parts 1524; of the framework's version number, separated by dots, and prefixed with "v", e.g. "v4.0.30319". 1525;com.dotnet_version= 1526 1527[mbstring] 1528; language for internal character representation. 1529; This affects mb_send_mail() and mbstring.detect_order. 1530; https://php.net/mbstring.language 1531;mbstring.language = Japanese 1532 1533; Use of this INI entry is deprecated, use global internal_encoding instead. 1534; internal/script encoding. 1535; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*) 1536; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 1537; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 1538;mbstring.internal_encoding = 1539 1540; Use of this INI entry is deprecated, use global input_encoding instead. 1541; http input encoding. 1542; mbstring.encoding_translation = On is needed to use this setting. 1543; If empty, default_charset or input_encoding or mbstring.input is used. 1544; The precedence is: default_charset < input_encoding < mbstring.http_input 1545; https://php.net/mbstring.http-input 1546;mbstring.http_input = 1547 1548; Use of this INI entry is deprecated, use global output_encoding instead. 1549; http output encoding. 1550; mb_output_handler must be registered as output buffer to function. 1551; If empty, default_charset or output_encoding or mbstring.http_output is used. 1552; The precedence is: default_charset < output_encoding < mbstring.http_output 1553; To use an output encoding conversion, mbstring's output handler must be set 1554; otherwise output encoding conversion cannot be performed. 1555; https://php.net/mbstring.http-output 1556;mbstring.http_output = 1557 1558; enable automatic encoding translation according to 1559; mbstring.internal_encoding setting. Input chars are 1560; converted to internal encoding by setting this to On. 1561; Note: Do _not_ use automatic encoding translation for 1562; portable libs/applications. 1563; https://php.net/mbstring.encoding-translation 1564;mbstring.encoding_translation = Off 1565 1566; automatic encoding detection order. 1567; "auto" detect order is changed according to mbstring.language 1568; https://php.net/mbstring.detect-order 1569;mbstring.detect_order = auto 1570 1571; substitute_character used when character cannot be converted 1572; one from another 1573; https://php.net/mbstring.substitute-character 1574;mbstring.substitute_character = none 1575 1576; Enable strict encoding detection. 1577;mbstring.strict_detection = Off 1578 1579; This directive specifies the regex pattern of content types for which mb_output_handler() 1580; is activated. 1581; Default: mbstring.http_output_conv_mimetypes=^(text/|application/xhtml\+xml) 1582;mbstring.http_output_conv_mimetypes= 1583 1584; This directive specifies maximum stack depth for mbstring regular expressions. It is similar 1585; to the pcre.recursion_limit for PCRE. 1586;mbstring.regex_stack_limit=100000 1587 1588; This directive specifies maximum retry count for mbstring regular expressions. It is similar 1589; to the pcre.backtrack_limit for PCRE. 1590;mbstring.regex_retry_limit=1000000 1591 1592[gd] 1593; Tell the jpeg decode to ignore warnings and try to create 1594; a gd image. The warning will then be displayed as notices 1595; disabled by default 1596; https://php.net/gd.jpeg-ignore-warning 1597;gd.jpeg_ignore_warning = 1 1598 1599[exif] 1600; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS. 1601; With mbstring support this will automatically be converted into the encoding 1602; given by corresponding encode setting. When empty mbstring.internal_encoding 1603; is used. For the decode settings you can distinguish between motorola and 1604; intel byte order. A decode setting must not be empty. 1605; https://php.net/exif.encode-unicode 1606;exif.encode_unicode = ISO-8859-15 1607 1608; https://php.net/exif.decode-unicode-motorola 1609;exif.decode_unicode_motorola = UCS-2BE 1610 1611; https://php.net/exif.decode-unicode-intel 1612;exif.decode_unicode_intel = UCS-2LE 1613 1614; https://php.net/exif.encode-jis 1615;exif.encode_jis = 1616 1617; https://php.net/exif.decode-jis-motorola 1618;exif.decode_jis_motorola = JIS 1619 1620; https://php.net/exif.decode-jis-intel 1621;exif.decode_jis_intel = JIS 1622 1623[Tidy] 1624; The path to a default tidy configuration file to use when using tidy 1625; https://php.net/tidy.default-config 1626;tidy.default_config = /usr/local/lib/php/default.tcfg 1627 1628; Should tidy clean and repair output automatically? 1629; WARNING: Do not use this option if you are generating non-html content 1630; such as dynamic images 1631; https://php.net/tidy.clean-output 1632tidy.clean_output = Off 1633 1634[soap] 1635; Enables or disables WSDL caching feature. 1636; https://php.net/soap.wsdl-cache-enabled 1637soap.wsdl_cache_enabled=1 1638 1639; Sets the directory name where SOAP extension will put cache files. 1640; https://php.net/soap.wsdl-cache-dir 1641soap.wsdl_cache_dir="/tmp" 1642 1643; (time to live) Sets the number of second while cached file will be used 1644; instead of original one. 1645; https://php.net/soap.wsdl-cache-ttl 1646soap.wsdl_cache_ttl=86400 1647 1648; Sets the size of the cache limit. (Max. number of WSDL files to cache) 1649soap.wsdl_cache_limit = 5 1650 1651[sysvshm] 1652; A default size of the shared memory segment 1653;sysvshm.init_mem = 10000 1654 1655[ldap] 1656; Sets the maximum number of open links or -1 for unlimited. 1657ldap.max_links = -1 1658 1659[dba] 1660;dba.default_handler= 1661 1662[opcache] 1663; Determines if Zend OPCache is enabled 1664;opcache.enable=1 1665 1666; Determines if Zend OPCache is enabled for the CLI version of PHP 1667;opcache.enable_cli=0 1668 1669; The OPcache shared memory storage size. 1670;opcache.memory_consumption=128 1671 1672; The amount of memory for interned strings in Mbytes. 1673;opcache.interned_strings_buffer=8 1674 1675; The maximum number of keys (scripts) in the OPcache hash table. 1676; Only numbers between 200 and 1000000 are allowed. 1677;opcache.max_accelerated_files=10000 1678 1679; The maximum percentage of "wasted" memory until a restart is scheduled. 1680;opcache.max_wasted_percentage=5 1681 1682; When this directive is enabled, the OPcache appends the current working 1683; directory to the script key, thus eliminating possible collisions between 1684; files with the same name (basename). Disabling the directive improves 1685; performance, but may break existing applications. 1686;opcache.use_cwd=1 1687 1688; When disabled, you must reset the OPcache manually or restart the 1689; webserver for changes to the filesystem to take effect. 1690;opcache.validate_timestamps=1 1691 1692; How often (in seconds) to check file timestamps for changes to the shared 1693; memory storage allocation. ("1" means validate once per second, but only 1694; once per request. "0" means always validate) 1695;opcache.revalidate_freq=2 1696 1697; Enables or disables file search in include_path optimization 1698;opcache.revalidate_path=0 1699 1700; If disabled, all PHPDoc comments are dropped from the code to reduce the 1701; size of the optimized code. 1702;opcache.save_comments=1 1703 1704; If enabled, compilation warnings (including notices and deprecations) will 1705; be recorded and replayed each time a file is included. Otherwise, compilation 1706; warnings will only be emitted when the file is first cached. 1707;opcache.record_warnings=0 1708 1709; Allow file existence override (file_exists, etc.) performance feature. 1710;opcache.enable_file_override=0 1711 1712; A bitmask, where each bit enables or disables the appropriate OPcache 1713; passes 1714;opcache.optimization_level=0x7FFFBFFF 1715 1716;opcache.dups_fix=0 1717 1718; The location of the OPcache blacklist file (wildcards allowed). 1719; Each OPcache blacklist file is a text file that holds the names of files 1720; that should not be accelerated. The file format is to add each filename 1721; to a new line. The filename may be a full path or just a file prefix 1722; (i.e., /var/www/x blacklists all the files and directories in /var/www 1723; that start with 'x'). Line starting with a ; are ignored (comments). 1724;opcache.blacklist_filename= 1725 1726; Allows exclusion of large files from being cached. By default all files 1727; are cached. 1728;opcache.max_file_size=0 1729 1730; How long to wait (in seconds) for a scheduled restart to begin if the cache 1731; is not being accessed. 1732;opcache.force_restart_timeout=180 1733 1734; OPcache error_log file name. Empty string assumes "stderr". 1735;opcache.error_log= 1736 1737; All OPcache errors go to the Web server log. 1738; By default, only fatal errors (level 0) or errors (level 1) are logged. 1739; You can also enable warnings (level 2), info messages (level 3) or 1740; debug messages (level 4). 1741;opcache.log_verbosity_level=1 1742 1743; Preferred Shared Memory back-end. Leave empty and let the system decide. 1744;opcache.preferred_memory_model= 1745 1746; Protect the shared memory from unexpected writing during script execution. 1747; Useful for internal debugging only. 1748;opcache.protect_memory=0 1749 1750; Allows calling OPcache API functions only from PHP scripts which path is 1751; started from specified string. The default "" means no restriction 1752;opcache.restrict_api= 1753 1754; Mapping base of shared memory segments (for Windows only). All the PHP 1755; processes have to map shared memory into the same address space. This 1756; directive allows to manually fix the "Unable to reattach to base address" 1757; errors. 1758;opcache.mmap_base= 1759 1760; Facilitates multiple OPcache instances per user (for Windows only). All PHP 1761; processes with the same cache ID and user share an OPcache instance. 1762;opcache.cache_id= 1763 1764; Enables and sets the second level cache directory. 1765; It should improve performance when SHM memory is full, at server restart or 1766; SHM reset. The default "" disables file based caching. 1767;opcache.file_cache= 1768 1769; Enables or disables opcode caching in shared memory. 1770;opcache.file_cache_only=0 1771 1772; Enables or disables checksum validation when script loaded from file cache. 1773;opcache.file_cache_consistency_checks=1 1774 1775; Implies opcache.file_cache_only=1 for a certain process that failed to 1776; reattach to the shared memory (for Windows only). Explicitly enabled file 1777; cache is required. 1778;opcache.file_cache_fallback=1 1779 1780; Enables or disables copying of PHP code (text segment) into HUGE PAGES. 1781; Under certain circumstances (if only a single global PHP process is 1782; started from which all others fork), this can increase performance 1783; by a tiny amount because TLB misses are reduced. On the other hand, this 1784; delays PHP startup, increases memory usage and degrades performance 1785; under memory pressure - use with care. 1786; Requires appropriate OS configuration. 1787;opcache.huge_code_pages=0 1788 1789; Validate cached file permissions. 1790;opcache.validate_permission=0 1791 1792; Prevent name collisions in chroot'ed environment. 1793;opcache.validate_root=0 1794 1795; If specified, it produces opcode dumps for debugging different stages of 1796; optimizations. 1797;opcache.opt_debug_level=0 1798 1799; Specifies a PHP script that is going to be compiled and executed at server 1800; start-up. 1801; https://php.net/opcache.preload 1802;opcache.preload= 1803 1804; Preloading code as root is not allowed for security reasons. This directive 1805; facilitates to let the preloading to be run as another user. 1806; https://php.net/opcache.preload_user 1807;opcache.preload_user= 1808 1809; Prevents caching files that are less than this number of seconds old. It 1810; protects from caching of incompletely updated files. In case all file updates 1811; on your site are atomic, you may increase performance by setting it to "0". 1812;opcache.file_update_protection=2 1813 1814; Absolute path used to store shared lockfiles (for *nix only). 1815;opcache.lockfile_path=/tmp 1816 1817[curl] 1818; A default value for the CURLOPT_CAINFO option. This is required to be an 1819; absolute path. 1820;curl.cainfo = 1821 1822[openssl] 1823; The location of a Certificate Authority (CA) file on the local filesystem 1824; to use when verifying the identity of SSL/TLS peers. Most users should 1825; not specify a value for this directive as PHP will attempt to use the 1826; OS-managed cert stores in its absence. If specified, this value may still 1827; be overridden on a per-stream basis via the "cafile" SSL stream context 1828; option. 1829;openssl.cafile= 1830 1831; If openssl.cafile is not specified or if the CA file is not found, the 1832; directory pointed to by openssl.capath is searched for a suitable 1833; certificate. This value must be a correctly hashed certificate directory. 1834; Most users should not specify a value for this directive as PHP will 1835; attempt to use the OS-managed cert stores in its absence. If specified, 1836; this value may still be overridden on a per-stream basis via the "capath" 1837; SSL stream context option. 1838;openssl.capath= 1839 1840[ffi] 1841; FFI API restriction. Possible values: 1842; "preload" - enabled in CLI scripts and preloaded files (default) 1843; "false" - always disabled 1844; "true" - always enabled 1845;ffi.enable=preload 1846 1847; List of headers files to preload, wildcard patterns allowed. 1848;ffi.preload= 1849