1[PHP] 2 3;;;;;;;;;;;;;;;;;;; 4; About php.ini ; 5;;;;;;;;;;;;;;;;;;; 6; PHP's initialization file, generally called php.ini, is responsible for 7; configuring many of the aspects of PHP's behavior. 8 9; PHP attempts to find and load this configuration from a number of locations. 10; The following is a summary of its search order: 11; 1. SAPI module specific location. 12; 2. The PHPRC environment variable. 13; 3. A number of predefined registry keys on Windows 14; 4. Current working directory (except CLI) 15; 5. The web server's directory (for SAPI modules), or directory of PHP 16; (otherwise in Windows) 17; 6. The directory from the --with-config-file-path compile time option, or the 18; Windows directory (usually C:\windows) 19; See the PHP docs for more specific information. 20; https://php.net/configuration.file 21 22; The syntax of the file is extremely simple. Whitespace and lines 23; beginning with a semicolon are silently ignored (as you probably guessed). 24; Section headers (e.g. [Foo]) are also silently ignored, even though 25; they might mean something in the future. 26 27; Directives following the section heading [PATH=/www/mysite] only 28; apply to PHP files in the /www/mysite directory. Directives 29; following the section heading [HOST=www.example.com] only apply to 30; PHP files served from www.example.com. Directives set in these 31; special sections cannot be overridden by user-defined INI files or 32; at runtime. Currently, [PATH=] and [HOST=] sections only work under 33; CGI/FastCGI. 34; https://php.net/ini.sections 35 36; Directives are specified using the following syntax: 37; directive = value 38; Directive names are *case sensitive* - foo=bar is different from FOO=bar. 39; Directives are variables used to configure PHP or PHP extensions. 40; There is no name validation. If PHP can't find an expected 41; directive because it is not set or is mistyped, a default value will be used. 42 43; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one 44; of the INI constants (On, Off, True, False, Yes, No and None) or an expression 45; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a 46; previously set variable or directive (e.g. ${foo}) 47 48; Expressions in the INI file are limited to bitwise operators and parentheses: 49; | bitwise OR 50; ^ bitwise XOR 51; & bitwise AND 52; ~ bitwise NOT 53; ! boolean NOT 54 55; Boolean flags can be turned on using the values 1, On, True or Yes. 56; They can be turned off using the values 0, Off, False or No. 57 58; An empty string can be denoted by simply not writing anything after the equal 59; sign, or by using the None keyword: 60 61; foo = ; sets foo to an empty string 62; foo = None ; sets foo to an empty string 63; foo = "None" ; sets foo to the string 'None' 64 65; If you use constants in your value, and these constants belong to a 66; dynamically loaded extension (either a PHP extension or a Zend extension), 67; you may only use these constants *after* the line that loads the extension. 68 69;;;;;;;;;;;;;;;;;;; 70; About this file ; 71;;;;;;;;;;;;;;;;;;; 72; PHP comes packaged with two INI files. One that is recommended to be used 73; in production environments and one that is recommended to be used in 74; development environments. 75 76; php.ini-production contains settings which hold security, performance and 77; best practices at its core. But please be aware, these settings may break 78; compatibility with older or less security-conscious applications. We 79; recommending using the production ini in production and testing environments. 80 81; php.ini-development is very similar to its production variant, except it is 82; much more verbose when it comes to errors. We recommend using the 83; development version only in development environments, as errors shown to 84; application users can inadvertently leak otherwise secure information. 85 86; This is the php.ini-production INI file. 87 88;;;;;;;;;;;;;;;;;;; 89; Quick Reference ; 90;;;;;;;;;;;;;;;;;;; 91 92; The following are all the settings which are different in either the production 93; or development versions of the INIs with respect to PHP's default behavior. 94; Please see the actual settings later in the document for more details as to why 95; we recommend these changes in PHP's behavior. 96 97; display_errors 98; Default Value: On 99; Development Value: On 100; Production Value: Off 101 102; display_startup_errors 103; Default Value: On 104; Development Value: On 105; Production Value: Off 106 107; error_reporting 108; Default Value: E_ALL 109; Development Value: E_ALL 110; Production Value: E_ALL & ~E_DEPRECATED 111 112; log_errors 113; Default Value: Off 114; Development Value: On 115; Production Value: On 116 117; max_input_time 118; Default Value: -1 (Unlimited) 119; Development Value: 60 (60 seconds) 120; Production Value: 60 (60 seconds) 121 122; output_buffering 123; Default Value: Off 124; Development Value: 4096 125; Production Value: 4096 126 127; register_argc_argv 128; Default Value: On 129; Development Value: Off 130; Production Value: Off 131 132; request_order 133; Default Value: None 134; Development Value: "GP" 135; Production Value: "GP" 136 137; session.gc_divisor 138; Default Value: 100 139; Development Value: 1000 140; Production Value: 1000 141 142; short_open_tag 143; Default Value: On 144; Development Value: Off 145; Production Value: Off 146 147; variables_order 148; Default Value: "EGPCS" 149; Development Value: "GPCS" 150; Production Value: "GPCS" 151 152; zend.assertions 153; Default Value: 1 154; Development Value: 1 155; Production Value: -1 156 157; zend.exception_ignore_args 158; Default Value: Off 159; Development Value: Off 160; Production Value: On 161 162; zend.exception_string_param_max_len 163; Default Value: 15 164; Development Value: 15 165; Production Value: 0 166 167;;;;;;;;;;;;;;;;;;;; 168; php.ini Options ; 169;;;;;;;;;;;;;;;;;;;; 170; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini" 171;user_ini.filename = ".user.ini" 172 173; To disable this feature set this option to an empty value 174;user_ini.filename = 175 176; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes) 177;user_ini.cache_ttl = 300 178 179;;;;;;;;;;;;;;;;;;;; 180; Language Options ; 181;;;;;;;;;;;;;;;;;;;; 182 183; Enable the PHP scripting language engine under Apache. 184; https://php.net/engine 185engine = On 186 187; This directive determines whether or not PHP will recognize code between 188; <? and ?> tags as PHP source which should be processed as such. It is 189; generally recommended that <?php and ?> should be used and that this feature 190; should be disabled, as enabling it may result in issues when generating XML 191; documents, however this remains supported for backward compatibility reasons. 192; Note that this directive does not control the <?= shorthand tag, which can be 193; used regardless of this directive. 194; Default Value: On 195; Development Value: Off 196; Production Value: Off 197; https://php.net/short-open-tag 198short_open_tag = Off 199 200; The number of significant digits displayed in floating point numbers. 201; https://php.net/precision 202precision = 14 203 204; Output buffering is a mechanism for controlling how much output data 205; (excluding headers and cookies) PHP should keep internally before pushing that 206; data to the client. If your application's output exceeds this setting, PHP 207; will send that data in chunks of roughly the size you specify. 208; Turning on this setting and managing its maximum buffer size can yield some 209; interesting side-effects depending on your application and web server. 210; You may be able to send headers and cookies after you've already sent output 211; through print or echo. You also may see performance benefits if your server is 212; emitting less packets due to buffered output versus PHP streaming the output 213; as it gets it. On production servers, 4096 bytes is a good setting for performance 214; reasons. 215; Note: Output buffering can also be controlled via Output Buffering Control 216; functions. 217; Possible Values: 218; On = Enabled and buffer is unlimited. (Use with caution) 219; Off = Disabled 220; Integer = Enables the buffer and sets its maximum size in bytes. 221; Note: This directive is hardcoded to Off for the CLI SAPI 222; Default Value: Off 223; Development Value: 4096 224; Production Value: 4096 225; https://php.net/output-buffering 226output_buffering = 4096 227 228; You can redirect all of the output of your scripts to a function. For 229; example, if you set output_handler to "mb_output_handler", character 230; encoding will be transparently converted to the specified encoding. 231; Setting any output handler automatically turns on output buffering. 232; Note: People who wrote portable scripts should not depend on this ini 233; directive. Instead, explicitly set the output handler using ob_start(). 234; Using this ini directive may cause problems unless you know what script 235; is doing. 236; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler" 237; and you cannot use both "ob_gzhandler" and "zlib.output_compression". 238; Note: output_handler must be empty if this is set 'On' !!!! 239; Instead you must use zlib.output_handler. 240; https://php.net/output-handler 241;output_handler = 242 243; URL rewriter function rewrites URL on the fly by using 244; output buffer. You can set target tags by this configuration. 245; "form" tag is special tag. It will add hidden input tag to pass values. 246; Refer to session.trans_sid_tags for usage. 247; Default Value: "form=" 248; Development Value: "form=" 249; Production Value: "form=" 250;url_rewriter.tags 251 252; URL rewriter will not rewrite absolute URL nor form by default. To enable 253; absolute URL rewrite, allowed hosts must be defined at RUNTIME. 254; Refer to session.trans_sid_hosts for more details. 255; Default Value: "" 256; Development Value: "" 257; Production Value: "" 258;url_rewriter.hosts 259 260; Transparent output compression using the zlib library 261; Valid values for this option are 'off', 'on', or a specific buffer size 262; to be used for compression (default is 4KB) 263; Note: Resulting chunk size may vary due to nature of compression. PHP 264; outputs chunks that are few hundreds bytes each as a result of 265; compression. If you prefer a larger chunk size for better 266; performance, enable output_buffering in addition. 267; Note: You need to use zlib.output_handler instead of the standard 268; output_handler, or otherwise the output will be corrupted. 269; https://php.net/zlib.output-compression 270zlib.output_compression = Off 271 272; https://php.net/zlib.output-compression-level 273;zlib.output_compression_level = -1 274 275; You cannot specify additional output handlers if zlib.output_compression 276; is activated here. This setting does the same as output_handler but in 277; a different order. 278; https://php.net/zlib.output-handler 279;zlib.output_handler = 280 281; Implicit flush tells PHP to tell the output layer to flush itself 282; automatically after every output block. This is equivalent to calling the 283; PHP function flush() after each and every call to print() or echo() and each 284; and every HTML block. Turning this option on has serious performance 285; implications and is generally recommended for debugging purposes only. 286; https://php.net/implicit-flush 287; Note: This directive is hardcoded to On for the CLI SAPI 288implicit_flush = Off 289 290; The unserialize callback function will be called (with the undefined class' 291; name as parameter), if the unserializer finds an undefined class 292; which should be instantiated. A warning appears if the specified function is 293; not defined, or if the function doesn't include/implement the missing class. 294; So only set this entry, if you really want to implement such a 295; callback-function. 296unserialize_callback_func = 297 298; The unserialize_max_depth specifies the default depth limit for unserialized 299; structures. Setting the depth limit too high may result in stack overflows 300; during unserialization. The unserialize_max_depth ini setting can be 301; overridden by the max_depth option on individual unserialize() calls. 302; A value of 0 disables the depth limit. 303;unserialize_max_depth = 4096 304 305; When floats & doubles are serialized, store serialize_precision significant 306; digits after the floating point. The default value ensures that when floats 307; are decoded with unserialize, the data will remain the same. 308; The value is also used for json_encode when encoding double values. 309; If -1 is used, then dtoa mode 0 is used which automatically select the best 310; precision. 311serialize_precision = -1 312 313; open_basedir, if set, limits all file operations to the defined directory 314; and below. This directive makes most sense if used in a per-directory 315; or per-virtualhost web server configuration file. 316; Note: disables the realpath cache 317; https://php.net/open-basedir 318;open_basedir = 319 320; This directive allows you to disable certain functions. 321; It receives a comma-delimited list of function names. 322; https://php.net/disable-functions 323disable_functions = 324 325; This directive allows you to disable certain classes. 326; It receives a comma-delimited list of class names. 327; https://php.net/disable-classes 328disable_classes = 329 330; Colors for Syntax Highlighting mode. Anything that's acceptable in 331; <span style="color: ???????"> would work. 332; https://php.net/syntax-highlighting 333;highlight.string = #DD0000 334;highlight.comment = #FF9900 335;highlight.keyword = #007700 336;highlight.default = #0000BB 337;highlight.html = #000000 338 339; If enabled, the request will be allowed to complete even if the user aborts 340; the request. Consider enabling it if executing long requests, which may end up 341; being interrupted by the user or a browser timing out. PHP's default behavior 342; is to disable this feature. 343; https://php.net/ignore-user-abort 344;ignore_user_abort = On 345 346; Determines the size of the realpath cache to be used by PHP. This value should 347; be increased on systems where PHP opens many files to reflect the quantity of 348; the file operations performed. 349; Note: if open_basedir is set, the cache is disabled 350; https://php.net/realpath-cache-size 351;realpath_cache_size = 4096k 352 353; Duration of time, in seconds for which to cache realpath information for a given 354; file or directory. For systems with rarely changing files, consider increasing this 355; value. 356; https://php.net/realpath-cache-ttl 357;realpath_cache_ttl = 120 358 359; Enables or disables the circular reference collector. 360; https://php.net/zend.enable-gc 361zend.enable_gc = On 362 363; If enabled, scripts may be written in encodings that are incompatible with 364; the scanner. CP936, Big5, CP949 and Shift_JIS are the examples of such 365; encodings. To use this feature, mbstring extension must be enabled. 366;zend.multibyte = Off 367 368; Allows to set the default encoding for the scripts. This value will be used 369; unless "declare(encoding=...)" directive appears at the top of the script. 370; Only affects if zend.multibyte is set. 371;zend.script_encoding = 372 373; Allows to include or exclude arguments from stack traces generated for exceptions. 374; In production, it is recommended to turn this setting on to prohibit the output 375; of sensitive information in stack traces 376; Default Value: Off 377; Development Value: Off 378; Production Value: On 379zend.exception_ignore_args = On 380 381; Allows setting the maximum string length in an argument of a stringified stack trace 382; to a value between 0 and 1000000. 383; This has no effect when zend.exception_ignore_args is enabled. 384; Default Value: 15 385; Development Value: 15 386; Production Value: 0 387; In production, it is recommended to set this to 0 to reduce the output 388; of sensitive information in stack traces. 389zend.exception_string_param_max_len = 0 390 391;;;;;;;;;;;;;;;;; 392; Miscellaneous ; 393;;;;;;;;;;;;;;;;; 394 395; Decides whether PHP may expose the fact that it is installed on the server 396; (e.g. by adding its signature to the Web server header). It is no security 397; threat in any way, but it makes it possible to determine whether you use PHP 398; on your server or not. 399; https://php.net/expose-php 400expose_php = On 401 402;;;;;;;;;;;;;;;;;;; 403; Resource Limits ; 404;;;;;;;;;;;;;;;;;;; 405 406; Maximum execution time of each script, in seconds 407; https://php.net/max-execution-time 408; Note: This directive is hardcoded to 0 for the CLI SAPI 409max_execution_time = 30 410 411; Maximum amount of time each script may spend parsing request data. It's a good 412; idea to limit this time on productions servers in order to eliminate unexpectedly 413; long running scripts. 414; Note: This directive is hardcoded to -1 for the CLI SAPI 415; Default Value: -1 (Unlimited) 416; Development Value: 60 (60 seconds) 417; Production Value: 60 (60 seconds) 418; https://php.net/max-input-time 419max_input_time = 60 420 421; Maximum input variable nesting level 422; https://php.net/max-input-nesting-level 423;max_input_nesting_level = 64 424 425; How many GET/POST/COOKIE input variables may be accepted 426;max_input_vars = 1000 427 428; How many multipart body parts (combined input variable and file uploads) may 429; be accepted. 430; Default Value: -1 (Sum of max_input_vars and max_file_uploads) 431;max_multipart_body_parts = 1500 432 433; Maximum amount of memory a script may consume 434; https://php.net/memory-limit 435memory_limit = 128M 436 437;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 438; Error handling and logging ; 439;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 440 441; This directive informs PHP of which errors, warnings and notices you would like 442; it to take action for. The recommended way of setting values for this 443; directive is through the use of the error level constants and bitwise 444; operators. The error level constants are below here for convenience as well as 445; some common settings and their meanings. 446; By default, PHP is set to take action on all errors, notices and warnings EXCEPT 447; those related to E_NOTICE, which together cover best practices and 448; recommended coding standards in PHP. For performance reasons, this is the 449; recommend error reporting setting. Your production server shouldn't be wasting 450; resources complaining about best practices and coding standards. That's what 451; development servers and development settings are for. 452; Note: The php.ini-development file has this setting as E_ALL. This 453; means it pretty much reports everything which is exactly what you want during 454; development and early testing. 455; 456; Error Level Constants: 457; E_ALL - All errors and warnings 458; E_ERROR - fatal run-time errors 459; E_RECOVERABLE_ERROR - almost fatal run-time errors 460; E_WARNING - run-time warnings (non-fatal errors) 461; E_PARSE - compile-time parse errors 462; E_NOTICE - run-time notices (these are warnings which often result 463; from a bug in your code, but it's possible that it was 464; intentional (e.g., using an uninitialized variable and 465; relying on the fact it is automatically initialized to an 466; empty string) 467; E_CORE_ERROR - fatal errors that occur during PHP's initial startup 468; E_CORE_WARNING - warnings (non-fatal errors) that occur during PHP's 469; initial startup 470; E_COMPILE_ERROR - fatal compile-time errors 471; E_COMPILE_WARNING - compile-time warnings (non-fatal errors) 472; E_USER_ERROR - user-generated error message 473; E_USER_WARNING - user-generated warning message 474; E_USER_NOTICE - user-generated notice message 475; E_DEPRECATED - warn about code that will not work in future versions 476; of PHP 477; E_USER_DEPRECATED - user-generated deprecation warnings 478; 479; Common Values: 480; E_ALL (Show all errors, warnings and notices including coding standards.) 481; E_ALL & ~E_NOTICE (Show all errors, except for notices) 482; E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR (Show only errors) 483; Default Value: E_ALL 484; Development Value: E_ALL 485; Production Value: E_ALL & ~E_DEPRECATED 486; https://php.net/error-reporting 487error_reporting = E_ALL & ~E_DEPRECATED 488 489; This directive controls whether or not and where PHP will output errors, 490; notices and warnings too. Error output is very useful during development, but 491; it could be very dangerous in production environments. Depending on the code 492; which is triggering the error, sensitive information could potentially leak 493; out of your application such as database usernames and passwords or worse. 494; For production environments, we recommend logging errors rather than 495; sending them to STDOUT. 496; Possible Values: 497; Off = Do not display any errors 498; stderr = Display errors to STDERR (affects only CGI/CLI binaries!) 499; On or stdout = Display errors to STDOUT 500; Default Value: On 501; Development Value: On 502; Production Value: Off 503; https://php.net/display-errors 504display_errors = Off 505 506; The display of errors which occur during PHP's startup sequence are handled 507; separately from display_errors. We strongly recommend you set this to 'off' 508; for production servers to avoid leaking configuration details. 509; Default Value: On 510; Development Value: On 511; Production Value: Off 512; https://php.net/display-startup-errors 513display_startup_errors = Off 514 515; Besides displaying errors, PHP can also log errors to locations such as a 516; server-specific log, STDERR, or a location specified by the error_log 517; directive found below. While errors should not be displayed on productions 518; servers they should still be monitored and logging is a great way to do that. 519; Default Value: Off 520; Development Value: On 521; Production Value: On 522; https://php.net/log-errors 523log_errors = On 524 525; Do not log repeated messages. Repeated errors must occur in same file on same 526; line unless ignore_repeated_source is set true. 527; https://php.net/ignore-repeated-errors 528ignore_repeated_errors = Off 529 530; Ignore source of message when ignoring repeated messages. When this setting 531; is On you will not log errors with repeated messages from different files or 532; source lines. 533; https://php.net/ignore-repeated-source 534ignore_repeated_source = Off 535 536; If this parameter is set to Off, then memory leaks will not be shown (on 537; stdout or in the log). This is only effective in a debug compile, and if 538; error reporting includes E_WARNING in the allowed list 539; https://php.net/report-memleaks 540report_memleaks = On 541 542; This setting is off by default. 543;report_zend_debug = 0 544 545; Turn off normal error reporting and emit XML-RPC error XML 546; https://php.net/xmlrpc-errors 547;xmlrpc_errors = 0 548 549; An XML-RPC faultCode 550;xmlrpc_error_number = 0 551 552; When PHP displays or logs an error, it has the capability of formatting the 553; error message as HTML for easier reading. This directive controls whether 554; the error message is formatted as HTML or not. 555; Note: This directive is hardcoded to Off for the CLI SAPI 556; https://php.net/html-errors 557;html_errors = On 558 559; If html_errors is set to On *and* docref_root is not empty, then PHP 560; produces clickable error messages that direct to a page describing the error 561; or function causing the error in detail. 562; You can download a copy of the PHP manual from https://php.net/docs 563; and change docref_root to the base URL of your local copy including the 564; leading '/'. You must also specify the file extension being used including 565; the dot. PHP's default behavior is to leave these settings empty, in which 566; case no links to documentation are generated. 567; Note: Never use this feature for production boxes. 568; https://php.net/docref-root 569; Examples 570;docref_root = "/phpmanual/" 571 572; https://php.net/docref-ext 573;docref_ext = .html 574 575; String to output before an error message. PHP's default behavior is to leave 576; this setting blank. 577; https://php.net/error-prepend-string 578; Example: 579;error_prepend_string = "<span style='color: #ff0000'>" 580 581; String to output after an error message. PHP's default behavior is to leave 582; this setting blank. 583; https://php.net/error-append-string 584; Example: 585;error_append_string = "</span>" 586 587; Log errors to specified file. PHP's default behavior is to leave this value 588; empty. 589; https://php.net/error-log 590; Example: 591;error_log = php_errors.log 592; Log errors to syslog (Event Log on Windows). 593;error_log = syslog 594 595; The syslog ident is a string which is prepended to every message logged 596; to syslog. Only used when error_log is set to syslog. 597;syslog.ident = php 598 599; The syslog facility is used to specify what type of program is logging 600; the message. Only used when error_log is set to syslog. 601;syslog.facility = user 602 603; Set this to disable filtering control characters (the default). 604; Some loggers only accept NVT-ASCII, others accept anything that's not 605; control characters. If your logger accepts everything, then no filtering 606; is needed at all. 607; Allowed values are: 608; ascii (all printable ASCII characters and NL) 609; no-ctrl (all characters except control characters) 610; all (all characters) 611; raw (like "all", but messages are not split at newlines) 612; https://php.net/syslog.filter 613;syslog.filter = ascii 614 615;windows.show_crt_warning 616; Default value: 0 617; Development value: 0 618; Production value: 0 619 620;;;;;;;;;;;;;;;;; 621; Data Handling ; 622;;;;;;;;;;;;;;;;; 623 624; The separator used in PHP generated URLs to separate arguments. 625; PHP's default setting is "&". 626; https://php.net/arg-separator.output 627; Example: 628;arg_separator.output = "&" 629 630; List of separator(s) used by PHP to parse input URLs into variables. 631; PHP's default setting is "&". 632; NOTE: Every character in this directive is considered as separator! 633; https://php.net/arg-separator.input 634; Example: 635;arg_separator.input = ";&" 636 637; This directive determines which super global arrays are registered when PHP 638; starts up. G,P,C,E & S are abbreviations for the following respective super 639; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty 640; paid for the registration of these arrays and because ENV is not as commonly 641; used as the others, ENV is not recommended on productions servers. You 642; can still get access to the environment variables through getenv() should you 643; need to. 644; Default Value: "EGPCS" 645; Development Value: "GPCS" 646; Production Value: "GPCS"; 647; https://php.net/variables-order 648variables_order = "GPCS" 649 650; This directive determines which super global data (G,P & C) should be 651; registered into the super global array REQUEST. If so, it also determines 652; the order in which that data is registered. The values for this directive 653; are specified in the same manner as the variables_order directive, 654; EXCEPT one. Leaving this value empty will cause PHP to use the value set 655; in the variables_order directive. It does not mean it will leave the super 656; globals array REQUEST empty. 657; Default Value: None 658; Development Value: "GP" 659; Production Value: "GP" 660; https://php.net/request-order 661request_order = "GP" 662 663; This directive determines whether PHP registers $argv & $argc each time it 664; runs. $argv contains an array of all the arguments passed to PHP when a script 665; is invoked. $argc contains an integer representing the number of arguments 666; that were passed when the script was invoked. These arrays are extremely 667; useful when running scripts from the command line. When this directive is 668; enabled, registering these variables consumes CPU cycles and memory each time 669; a script is executed. For performance reasons, this feature should be disabled 670; on production servers. 671; Note: This directive is hardcoded to On for the CLI SAPI 672; Default Value: On 673; Development Value: Off 674; Production Value: Off 675; https://php.net/register-argc-argv 676register_argc_argv = Off 677 678; When enabled, the ENV, REQUEST and SERVER variables are created when they're 679; first used (Just In Time) instead of when the script starts. If these 680; variables are not used within a script, having this directive on will result 681; in a performance gain. The PHP directive register_argc_argv must be disabled 682; for this directive to have any effect. 683; https://php.net/auto-globals-jit 684auto_globals_jit = On 685 686; Whether PHP will read the POST data. 687; This option is enabled by default. 688; Most likely, you won't want to disable this option globally. It causes $_POST 689; and $_FILES to always be empty; the only way you will be able to read the 690; POST data will be through the php://input stream wrapper. This can be useful 691; to proxy requests or to process the POST data in a memory efficient fashion. 692; https://php.net/enable-post-data-reading 693;enable_post_data_reading = Off 694 695; Maximum size of POST data that PHP will accept. 696; Its value may be 0 to disable the limit. It is ignored if POST data reading 697; is disabled through enable_post_data_reading. 698; https://php.net/post-max-size 699post_max_size = 8M 700 701; Automatically add files before PHP document. 702; https://php.net/auto-prepend-file 703auto_prepend_file = 704 705; Automatically add files after PHP document. 706; https://php.net/auto-append-file 707auto_append_file = 708 709; By default, PHP will output a media type using the Content-Type header. To 710; disable this, simply set it to be empty. 711; 712; PHP's built-in default media type is set to text/html. 713; https://php.net/default-mimetype 714default_mimetype = "text/html" 715 716; PHP's default character set is set to UTF-8. 717; https://php.net/default-charset 718default_charset = "UTF-8" 719 720; PHP internal character encoding is set to empty. 721; If empty, default_charset is used. 722; https://php.net/internal-encoding 723;internal_encoding = 724 725; PHP input character encoding is set to empty. 726; If empty, default_charset is used. 727; https://php.net/input-encoding 728;input_encoding = 729 730; PHP output character encoding is set to empty. 731; If empty, default_charset is used. 732; See also output_buffer. 733; https://php.net/output-encoding 734;output_encoding = 735 736;;;;;;;;;;;;;;;;;;;;;;;;; 737; Paths and Directories ; 738;;;;;;;;;;;;;;;;;;;;;;;;; 739 740; UNIX: "/path1:/path2" 741;include_path = ".:/php/includes" 742; 743; Windows: "\path1;\path2" 744;include_path = ".;c:\php\includes" 745; 746; PHP's default setting for include_path is ".;/path/to/php/pear" 747; https://php.net/include-path 748 749; The root of the PHP pages, used only if nonempty. 750; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root 751; if you are running php as a CGI under any web server (other than IIS) 752; see documentation for security issues. The alternate is to use the 753; cgi.force_redirect configuration below 754; https://php.net/doc-root 755doc_root = 756 757; The directory under which PHP opens the script using /~username used only 758; if nonempty. 759; https://php.net/user-dir 760user_dir = 761 762; Directory in which the loadable extensions (modules) reside. 763; https://php.net/extension-dir 764;extension_dir = "./" 765; On windows: 766;extension_dir = "ext" 767 768; Directory where the temporary files should be placed. 769; Defaults to the system default (see sys_get_temp_dir) 770;sys_temp_dir = "/tmp" 771 772; Whether or not to enable the dl() function. The dl() function does NOT work 773; properly in multithreaded servers, such as IIS or Zeus, and is automatically 774; disabled on them. 775; https://php.net/enable-dl 776enable_dl = Off 777 778; cgi.force_redirect is necessary to provide security running PHP as a CGI under 779; most web servers. Left undefined, PHP turns this on by default. You can 780; turn it off here AT YOUR OWN RISK 781; **You CAN safely turn this off for IIS, in fact, you MUST.** 782; https://php.net/cgi.force-redirect 783;cgi.force_redirect = 1 784 785; if cgi.nph is enabled it will force cgi to always sent Status: 200 with 786; every request. PHP's default behavior is to disable this feature. 787;cgi.nph = 1 788 789; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape 790; (iPlanet) web servers, you MAY need to set an environment variable name that PHP 791; will look for to know it is OK to continue execution. Setting this variable MAY 792; cause security issues, KNOW WHAT YOU ARE DOING FIRST. 793; https://php.net/cgi.redirect-status-env 794;cgi.redirect_status_env = 795 796; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's 797; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok 798; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting 799; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting 800; of zero causes PHP to behave as before. Default is 1. You should fix your scripts 801; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. 802; https://php.net/cgi.fix-pathinfo 803;cgi.fix_pathinfo=1 804 805; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside 806; of the web tree and people will not be able to circumvent .htaccess security. 807;cgi.discard_path=1 808 809; FastCGI under IIS supports the ability to impersonate 810; security tokens of the calling client. This allows IIS to define the 811; security context that the request runs under. mod_fastcgi under Apache 812; does not currently support this feature (03/17/2002) 813; Set to 1 if running under IIS. Default is zero. 814; https://php.net/fastcgi.impersonate 815;fastcgi.impersonate = 1 816 817; Disable logging through FastCGI connection. PHP's default behavior is to enable 818; this feature. 819;fastcgi.logging = 0 820 821; cgi.rfc2616_headers configuration option tells PHP what type of headers to 822; use when sending HTTP response code. If set to 0, PHP sends Status: header that 823; is supported by Apache. When this option is set to 1, PHP will send 824; RFC2616 compliant header. 825; Default is zero. 826; https://php.net/cgi.rfc2616-headers 827;cgi.rfc2616_headers = 0 828 829; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #! 830; (shebang) at the top of the running script. This line might be needed if the 831; script support running both as stand-alone script and via PHP CGI<. PHP in CGI 832; mode skips this line and ignores its content if this directive is turned on. 833; https://php.net/cgi.check-shebang-line 834;cgi.check_shebang_line=1 835 836;;;;;;;;;;;;;;;; 837; File Uploads ; 838;;;;;;;;;;;;;;;; 839 840; Whether to allow HTTP file uploads. 841; https://php.net/file-uploads 842file_uploads = On 843 844; Temporary directory for HTTP uploaded files (will use system default if not 845; specified). 846; https://php.net/upload-tmp-dir 847;upload_tmp_dir = 848 849; Maximum allowed size for uploaded files. 850; https://php.net/upload-max-filesize 851upload_max_filesize = 2M 852 853; Maximum number of files that can be uploaded via a single request 854max_file_uploads = 20 855 856;;;;;;;;;;;;;;;;;; 857; Fopen wrappers ; 858;;;;;;;;;;;;;;;;;; 859 860; Whether to allow the treatment of URLs (like http:// or ftp://) as files. 861; https://php.net/allow-url-fopen 862allow_url_fopen = On 863 864; Whether to allow include/require to open URLs (like https:// or ftp://) as files. 865; https://php.net/allow-url-include 866allow_url_include = Off 867 868; Define the anonymous ftp password (your email address). PHP's default setting 869; for this is empty. 870; https://php.net/from 871;from="john@doe.com" 872 873; Define the User-Agent string. PHP's default setting for this is empty. 874; https://php.net/user-agent 875;user_agent="PHP" 876 877; Default timeout for socket based streams (seconds) 878; https://php.net/default-socket-timeout 879default_socket_timeout = 60 880 881; If your scripts have to deal with files from Macintosh systems, 882; or you are running on a Mac and need to deal with files from 883; unix or win32 systems, setting this flag will cause PHP to 884; automatically detect the EOL character in those files so that 885; fgets() and file() will work regardless of the source of the file. 886; https://php.net/auto-detect-line-endings 887;auto_detect_line_endings = Off 888 889;;;;;;;;;;;;;;;;;;;;;; 890; Dynamic Extensions ; 891;;;;;;;;;;;;;;;;;;;;;; 892 893; If you wish to have an extension loaded automatically, use the following 894; syntax: 895; 896; extension=modulename 897; 898; For example: 899; 900; extension=mysqli 901; 902; When the extension library to load is not located in the default extension 903; directory, You may specify an absolute path to the library file: 904; 905; extension=/path/to/extension/mysqli.so 906; 907; Note : The syntax used in previous PHP versions ('extension=<ext>.so' and 908; 'extension='php_<ext>.dll') is supported for legacy reasons and may be 909; deprecated in a future PHP major version. So, when it is possible, please 910; move to the new ('extension=<ext>) syntax. 911; 912; Notes for Windows environments : 913; 914; - Many DLL files are located in the ext/ 915; extension folders as well as the separate PECL DLL download. 916; Be sure to appropriately set the extension_dir directive. 917; 918;extension=bz2 919;extension=curl 920;extension=exif 921;extension=ffi 922;extension=ftp 923;extension=fileinfo 924;extension=gd 925;extension=gettext 926;extension=gmp 927;extension=intl 928;extension=ldap 929;extension=mbstring 930;extension=mysqli 931;extension=odbc 932;extension=openssl 933;extension=pdo_firebird 934;extension=pdo_mysql 935;extension=pdo_odbc 936;extension=pdo_pgsql 937;extension=pdo_sqlite 938;extension=pgsql 939;extension=shmop 940 941; The MIBS data available in the PHP distribution must be installed. 942; See https://www.php.net/manual/en/snmp.installation.php 943;extension=snmp 944 945;extension=soap 946;extension=sockets 947;extension=sodium 948;extension=sqlite3 949;extension=tidy 950;extension=xsl 951;extension=zip 952 953;zend_extension=opcache 954 955;;;;;;;;;;;;;;;;;;; 956; Module Settings ; 957;;;;;;;;;;;;;;;;;;; 958 959[CLI Server] 960; Whether the CLI web server uses ANSI color coding in its terminal output. 961cli_server.color = On 962 963[Date] 964; Defines the default timezone used by the date functions 965; https://php.net/date.timezone 966;date.timezone = 967 968; https://php.net/date.default-latitude 969;date.default_latitude = 31.7667 970 971; https://php.net/date.default-longitude 972;date.default_longitude = 35.2333 973 974; https://php.net/date.sunrise-zenith 975;date.sunrise_zenith = 90.833333 976 977; https://php.net/date.sunset-zenith 978;date.sunset_zenith = 90.833333 979 980[filter] 981; https://php.net/filter.default 982;filter.default = unsafe_raw 983 984; https://php.net/filter.default-flags 985;filter.default_flags = 986 987[iconv] 988; Use of this INI entry is deprecated, use global input_encoding instead. 989; If empty, default_charset or input_encoding or iconv.input_encoding is used. 990; The precedence is: default_charset < input_encoding < iconv.input_encoding 991;iconv.input_encoding = 992 993; Use of this INI entry is deprecated, use global internal_encoding instead. 994; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 995; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 996;iconv.internal_encoding = 997 998; Use of this INI entry is deprecated, use global output_encoding instead. 999; If empty, default_charset or output_encoding or iconv.output_encoding is used. 1000; The precedence is: default_charset < output_encoding < iconv.output_encoding 1001; To use an output encoding conversion, iconv's output handler must be set 1002; otherwise output encoding conversion cannot be performed. 1003;iconv.output_encoding = 1004 1005[intl] 1006;intl.default_locale = 1007; This directive allows you to produce PHP errors when some error 1008; happens within intl functions. The value is the level of the error produced. 1009; Default is 0, which does not produce any errors. 1010;intl.error_level = E_WARNING 1011;intl.use_exceptions = 0 1012 1013[sqlite3] 1014; Directory pointing to SQLite3 extensions 1015; https://php.net/sqlite3.extension-dir 1016;sqlite3.extension_dir = 1017 1018; SQLite defensive mode flag (only available from SQLite 3.26+) 1019; When the defensive flag is enabled, language features that allow ordinary 1020; SQL to deliberately corrupt the database file are disabled. This forbids 1021; writing directly to the schema, shadow tables (eg. FTS data tables), or 1022; the sqlite_dbpage virtual table. 1023; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html 1024; (for older SQLite versions, this flag has no use) 1025;sqlite3.defensive = 1 1026 1027[Pcre] 1028; PCRE library backtracking limit. 1029; https://php.net/pcre.backtrack-limit 1030;pcre.backtrack_limit=100000 1031 1032; PCRE library recursion limit. 1033; Please note that if you set this value to a high number you may consume all 1034; the available process stack and eventually crash PHP (due to reaching the 1035; stack size limit imposed by the Operating System). 1036; https://php.net/pcre.recursion-limit 1037;pcre.recursion_limit=100000 1038 1039; Enables or disables JIT compilation of patterns. This requires the PCRE 1040; library to be compiled with JIT support. 1041;pcre.jit=1 1042 1043[Pdo] 1044; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off" 1045; https://php.net/pdo-odbc.connection-pooling 1046;pdo_odbc.connection_pooling=strict 1047 1048[Pdo_mysql] 1049; Default socket name for local MySQL connects. If empty, uses the built-in 1050; MySQL defaults. 1051pdo_mysql.default_socket= 1052 1053[Phar] 1054; https://php.net/phar.readonly 1055;phar.readonly = On 1056 1057; https://php.net/phar.require-hash 1058;phar.require_hash = On 1059 1060;phar.cache_list = 1061 1062[mail function] 1063; For Win32 only. 1064; https://php.net/smtp 1065SMTP = localhost 1066; https://php.net/smtp-port 1067smtp_port = 25 1068 1069; For Win32 only. 1070; https://php.net/sendmail-from 1071;sendmail_from = me@example.com 1072 1073; For Unix only. You may supply arguments as well (default: "sendmail -t -i"). 1074; https://php.net/sendmail-path 1075;sendmail_path = 1076 1077; Force the addition of the specified parameters to be passed as extra parameters 1078; to the sendmail binary. These parameters will always replace the value of 1079; the 5th parameter to mail(). 1080;mail.force_extra_parameters = 1081 1082; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename 1083mail.add_x_header = Off 1084 1085; Use mixed LF and CRLF line separators to keep compatibility with some 1086; RFC 2822 non conformant MTA. 1087mail.mixed_lf_and_crlf = Off 1088 1089; The path to a log file that will log all mail() calls. Log entries include 1090; the full path of the script, line number, To address and headers. 1091;mail.log = 1092; Log mail to syslog (Event Log on Windows). 1093;mail.log = syslog 1094 1095[ODBC] 1096; https://php.net/odbc.default-db 1097;odbc.default_db = Not yet implemented 1098 1099; https://php.net/odbc.default-user 1100;odbc.default_user = Not yet implemented 1101 1102; https://php.net/odbc.default-pw 1103;odbc.default_pw = Not yet implemented 1104 1105; Controls the ODBC cursor model. 1106; Default: SQL_CURSOR_STATIC (default). 1107;odbc.default_cursortype 1108 1109; Allow or prevent persistent links. 1110; https://php.net/odbc.allow-persistent 1111odbc.allow_persistent = On 1112 1113; Check that a connection is still valid before reuse. 1114; https://php.net/odbc.check-persistent 1115odbc.check_persistent = On 1116 1117; Maximum number of persistent links. -1 means no limit. 1118; https://php.net/odbc.max-persistent 1119odbc.max_persistent = -1 1120 1121; Maximum number of links (persistent + non-persistent). -1 means no limit. 1122; https://php.net/odbc.max-links 1123odbc.max_links = -1 1124 1125; Handling of LONG fields. Returns number of bytes to variables. 0 means 1126; passthru. 1127; https://php.net/odbc.defaultlrl 1128odbc.defaultlrl = 4096 1129 1130; Handling of binary data. 0 means passthru, 1 return as is, 2 convert to char. 1131; See the documentation on odbc_binmode and odbc_longreadlen for an explanation 1132; of odbc.defaultlrl and odbc.defaultbinmode 1133; https://php.net/odbc.defaultbinmode 1134odbc.defaultbinmode = 1 1135 1136[MySQLi] 1137 1138; Maximum number of persistent links. -1 means no limit. 1139; https://php.net/mysqli.max-persistent 1140mysqli.max_persistent = -1 1141 1142; Allow accessing, from PHP's perspective, local files with LOAD DATA statements 1143; https://php.net/mysqli.allow_local_infile 1144;mysqli.allow_local_infile = On 1145 1146; It allows the user to specify a folder where files that can be sent via LOAD DATA 1147; LOCAL can exist. It is ignored if mysqli.allow_local_infile is enabled. 1148;mysqli.local_infile_directory = 1149 1150; Allow or prevent persistent links. 1151; https://php.net/mysqli.allow-persistent 1152mysqli.allow_persistent = On 1153 1154; Maximum number of links. -1 means no limit. 1155; https://php.net/mysqli.max-links 1156mysqli.max_links = -1 1157 1158; Default port number for mysqli_connect(). If unset, mysqli_connect() will use 1159; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the 1160; compile-time value defined MYSQL_PORT (in that order). Win32 will only look 1161; at MYSQL_PORT. 1162; https://php.net/mysqli.default-port 1163mysqli.default_port = 3306 1164 1165; Default socket name for local MySQL connects. If empty, uses the built-in 1166; MySQL defaults. 1167; https://php.net/mysqli.default-socket 1168mysqli.default_socket = 1169 1170; Default host for mysqli_connect() (doesn't apply in safe mode). 1171; https://php.net/mysqli.default-host 1172mysqli.default_host = 1173 1174; Default user for mysqli_connect() (doesn't apply in safe mode). 1175; https://php.net/mysqli.default-user 1176mysqli.default_user = 1177 1178; Default password for mysqli_connect() (doesn't apply in safe mode). 1179; Note that this is generally a *bad* idea to store passwords in this file. 1180; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw") 1181; and reveal this password! And of course, any users with read access to this 1182; file will be able to reveal the password as well. 1183; https://php.net/mysqli.default-pw 1184mysqli.default_pw = 1185 1186; If this option is enabled, closing a persistent connection will rollback 1187; any pending transactions of this connection, before it is put back 1188; into the persistent connection pool. 1189;mysqli.rollback_on_cached_plink = Off 1190 1191[mysqlnd] 1192; Enable / Disable collection of general statistics by mysqlnd which can be 1193; used to tune and monitor MySQL operations. 1194mysqlnd.collect_statistics = On 1195 1196; Enable / Disable collection of memory usage statistics by mysqlnd which can be 1197; used to tune and monitor MySQL operations. 1198mysqlnd.collect_memory_statistics = Off 1199 1200; Records communication from all extensions using mysqlnd to the specified log 1201; file. 1202; https://php.net/mysqlnd.debug 1203;mysqlnd.debug = 1204 1205; Defines which queries will be logged. 1206;mysqlnd.log_mask = 0 1207 1208; Default size of the mysqlnd memory pool, which is used by result sets. 1209;mysqlnd.mempool_default_size = 16000 1210 1211; Size of a pre-allocated buffer used when sending commands to MySQL in bytes. 1212;mysqlnd.net_cmd_buffer_size = 2048 1213 1214; Size of a pre-allocated buffer used for reading data sent by the server in 1215; bytes. 1216;mysqlnd.net_read_buffer_size = 32768 1217 1218; Timeout for network requests in seconds. 1219;mysqlnd.net_read_timeout = 31536000 1220 1221; SHA-256 Authentication Plugin related. File with the MySQL server public RSA 1222; key. 1223;mysqlnd.sha256_server_public_key = 1224 1225[PostgreSQL] 1226; Allow or prevent persistent links. 1227; https://php.net/pgsql.allow-persistent 1228pgsql.allow_persistent = On 1229 1230; Detect broken persistent links always with pg_pconnect(). 1231; Auto reset feature requires a little overheads. 1232; https://php.net/pgsql.auto-reset-persistent 1233pgsql.auto_reset_persistent = Off 1234 1235; Maximum number of persistent links. -1 means no limit. 1236; https://php.net/pgsql.max-persistent 1237pgsql.max_persistent = -1 1238 1239; Maximum number of links (persistent+non persistent). -1 means no limit. 1240; https://php.net/pgsql.max-links 1241pgsql.max_links = -1 1242 1243; Ignore PostgreSQL backends Notice message or not. 1244; Notice message logging require a little overheads. 1245; https://php.net/pgsql.ignore-notice 1246pgsql.ignore_notice = 0 1247 1248; Log PostgreSQL backends Notice message or not. 1249; Unless pgsql.ignore_notice=0, module cannot log notice message. 1250; https://php.net/pgsql.log-notice 1251pgsql.log_notice = 0 1252 1253[bcmath] 1254; Number of decimal digits for all bcmath functions. 1255; https://php.net/bcmath.scale 1256bcmath.scale = 0 1257 1258[browscap] 1259; https://php.net/browscap 1260;browscap = extra/browscap.ini 1261 1262[Session] 1263; Handler used to store/retrieve data. 1264; https://php.net/session.save-handler 1265session.save_handler = files 1266 1267; Argument passed to save_handler. In the case of files, this is the path 1268; where data files are stored. Note: Windows users have to change this 1269; variable in order to use PHP's session functions. 1270; 1271; The path can be defined as: 1272; 1273; session.save_path = "N;/path" 1274; 1275; where N is an integer. Instead of storing all the session files in 1276; /path, what this will do is use subdirectories N-levels deep, and 1277; store the session data in those directories. This is useful if 1278; your OS has problems with many files in one directory, and is 1279; a more efficient layout for servers that handle many sessions. 1280; 1281; NOTE 1: PHP will not create this directory structure automatically. 1282; You can use the script in the ext/session dir for that purpose. 1283; NOTE 2: See the section on garbage collection below if you choose to 1284; use subdirectories for session storage 1285; 1286; The file storage module creates files using mode 600 by default. 1287; You can change that by using 1288; 1289; session.save_path = "N;MODE;/path" 1290; 1291; where MODE is the octal representation of the mode. Note that this 1292; does not overwrite the process's umask. 1293; https://php.net/session.save-path 1294;session.save_path = "/tmp" 1295 1296; Whether to use strict session mode. 1297; Strict session mode does not accept an uninitialized session ID, and 1298; regenerates the session ID if the browser sends an uninitialized session ID. 1299; Strict mode protects applications from session fixation via a session adoption 1300; vulnerability. It is disabled by default for maximum compatibility, but 1301; enabling it is encouraged. 1302; https://wiki.php.net/rfc/strict_sessions 1303session.use_strict_mode = 0 1304 1305; Whether to use cookies. 1306; https://php.net/session.use-cookies 1307session.use_cookies = 1 1308 1309; https://php.net/session.cookie-secure 1310;session.cookie_secure = 1311 1312; This option forces PHP to fetch and use a cookie for storing and maintaining 1313; the session id. We encourage this operation as it's very helpful in combating 1314; session hijacking when not specifying and managing your own session id. It is 1315; not the be-all and end-all of session hijacking defense, but it's a good start. 1316; https://php.net/session.use-only-cookies 1317session.use_only_cookies = 1 1318 1319; Name of the session (used as cookie name). 1320; https://php.net/session.name 1321session.name = PHPSESSID 1322 1323; Initialize session on request startup. 1324; https://php.net/session.auto-start 1325session.auto_start = 0 1326 1327; Lifetime in seconds of cookie or, if 0, until browser is restarted. 1328; https://php.net/session.cookie-lifetime 1329session.cookie_lifetime = 0 1330 1331; The path for which the cookie is valid. 1332; https://php.net/session.cookie-path 1333session.cookie_path = / 1334 1335; The domain for which the cookie is valid. 1336; https://php.net/session.cookie-domain 1337session.cookie_domain = 1338 1339; Whether or not to add the httpOnly flag to the cookie, which makes it 1340; inaccessible to browser scripting languages such as JavaScript. 1341; https://php.net/session.cookie-httponly 1342session.cookie_httponly = 1343 1344; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) 1345; Current valid values are "Strict", "Lax" or "None". When using "None", 1346; make sure to include the quotes, as `none` is interpreted like `false` in ini files. 1347; https://tools.ietf.org/html/draft-west-first-party-cookies-07 1348session.cookie_samesite = 1349 1350; Handler used to serialize data. php is the standard serializer of PHP. 1351; https://php.net/session.serialize-handler 1352session.serialize_handler = php 1353 1354; Defines the probability that the 'garbage collection' process is started on every 1355; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1356; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1357; Default Value: 1 1358; Development Value: 1 1359; Production Value: 1 1360; https://php.net/session.gc-probability 1361session.gc_probability = 1 1362 1363; Defines the probability that the 'garbage collection' process is started on every 1364; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1365; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1366; For high volume production servers, using a value of 1000 is a more efficient approach. 1367; Default Value: 100 1368; Development Value: 1000 1369; Production Value: 1000 1370; https://php.net/session.gc-divisor 1371session.gc_divisor = 1000 1372 1373; After this number of seconds, stored data will be seen as 'garbage' and 1374; cleaned up by the garbage collection process. 1375; https://php.net/session.gc-maxlifetime 1376session.gc_maxlifetime = 1440 1377 1378; NOTE: If you are using the subdirectory option for storing session files 1379; (see session.save_path above), then garbage collection does *not* 1380; happen automatically. You will need to do your own garbage 1381; collection through a shell script, cron entry, or some other method. 1382; For example, the following script is the equivalent of setting 1383; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): 1384; find /path/to/sessions -cmin +24 -type f | xargs rm 1385 1386; Check HTTP Referer to invalidate externally stored URLs containing ids. 1387; HTTP_REFERER has to contain this substring for the session to be 1388; considered as valid. 1389; https://php.net/session.referer-check 1390session.referer_check = 1391 1392; Set to {nocache,private,public,} to determine HTTP caching aspects 1393; or leave this empty to avoid sending anti-caching headers. 1394; https://php.net/session.cache-limiter 1395session.cache_limiter = nocache 1396 1397; Document expires after n minutes. 1398; https://php.net/session.cache-expire 1399session.cache_expire = 180 1400 1401; trans sid support is disabled by default. 1402; Use of trans sid may risk your users' security. 1403; Use this option with caution. 1404; - User may send URL contains active session ID 1405; to other person via. email/irc/etc. 1406; - URL that contains active session ID may be stored 1407; in publicly accessible computer. 1408; - User may access your site with the same session ID 1409; always using URL stored in browser's history or bookmarks. 1410; https://php.net/session.use-trans-sid 1411session.use_trans_sid = 0 1412 1413; The URL rewriter will look for URLs in a defined set of HTML tags. 1414; <form> is special; if you include them here, the rewriter will 1415; add a hidden <input> field with the info which is otherwise appended 1416; to URLs. <form> tag's action attribute URL will not be modified 1417; unless it is specified. 1418; Note that all valid entries require a "=", even if no value follows. 1419; Default Value: "a=href,area=href,frame=src,form=" 1420; Development Value: "a=href,area=href,frame=src,form=" 1421; Production Value: "a=href,area=href,frame=src,form=" 1422; https://php.net/url-rewriter.tags 1423session.trans_sid_tags = "a=href,area=href,frame=src,form=" 1424 1425; URL rewriter does not rewrite absolute URLs by default. 1426; To enable rewrites for absolute paths, target hosts must be specified 1427; at RUNTIME. i.e. use ini_set() 1428; <form> tags is special. PHP will check action attribute's URL regardless 1429; of session.trans_sid_tags setting. 1430; If no host is defined, HTTP_HOST will be used for allowed host. 1431; Example value: php.net,www.php.net,wiki.php.net 1432; Use "," for multiple hosts. No spaces are allowed. 1433; Default Value: "" 1434; Development Value: "" 1435; Production Value: "" 1436;session.trans_sid_hosts="" 1437 1438; Enable upload progress tracking in $_SESSION 1439; Default Value: On 1440; Development Value: On 1441; Production Value: On 1442; https://php.net/session.upload-progress.enabled 1443;session.upload_progress.enabled = On 1444 1445; Cleanup the progress information as soon as all POST data has been read 1446; (i.e. upload completed). 1447; Default Value: On 1448; Development Value: On 1449; Production Value: On 1450; https://php.net/session.upload-progress.cleanup 1451;session.upload_progress.cleanup = On 1452 1453; A prefix used for the upload progress key in $_SESSION 1454; Default Value: "upload_progress_" 1455; Development Value: "upload_progress_" 1456; Production Value: "upload_progress_" 1457; https://php.net/session.upload-progress.prefix 1458;session.upload_progress.prefix = "upload_progress_" 1459 1460; The index name (concatenated with the prefix) in $_SESSION 1461; containing the upload progress information 1462; Default Value: "PHP_SESSION_UPLOAD_PROGRESS" 1463; Development Value: "PHP_SESSION_UPLOAD_PROGRESS" 1464; Production Value: "PHP_SESSION_UPLOAD_PROGRESS" 1465; https://php.net/session.upload-progress.name 1466;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS" 1467 1468; How frequently the upload progress should be updated. 1469; Given either in percentages (per-file), or in bytes 1470; Default Value: "1%" 1471; Development Value: "1%" 1472; Production Value: "1%" 1473; https://php.net/session.upload-progress.freq 1474;session.upload_progress.freq = "1%" 1475 1476; The minimum delay between updates, in seconds 1477; Default Value: 1 1478; Development Value: 1 1479; Production Value: 1 1480; https://php.net/session.upload-progress.min-freq 1481;session.upload_progress.min_freq = "1" 1482 1483; Only write session data when session data is changed. Enabled by default. 1484; https://php.net/session.lazy-write 1485;session.lazy_write = On 1486 1487[Assertion] 1488; Switch whether to compile assertions at all (to have no overhead at run-time) 1489; -1: Do not compile at all 1490; 0: Jump over assertion at run-time 1491; 1: Execute assertions 1492; Changing from or to a negative value is only possible in php.ini! 1493; (For turning assertions on and off at run-time, toggle zend.assertions between the values 1 and 0) 1494; Default Value: 1 1495; Development Value: 1 1496; Production Value: -1 1497; https://php.net/zend.assertions 1498zend.assertions = -1 1499 1500[COM] 1501; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs 1502; https://php.net/com.typelib-file 1503;com.typelib_file = 1504 1505; allow Distributed-COM calls 1506; https://php.net/com.allow-dcom 1507;com.allow_dcom = true 1508 1509; autoregister constants of a component's typelib on com_load() 1510; https://php.net/com.autoregister-typelib 1511;com.autoregister_typelib = true 1512 1513; register constants casesensitive 1514; https://php.net/com.autoregister-casesensitive 1515;com.autoregister_casesensitive = false 1516 1517; show warnings on duplicate constant registrations 1518; https://php.net/com.autoregister-verbose 1519;com.autoregister_verbose = true 1520 1521; The default character set code-page to use when passing strings to and from COM objects. 1522; Default: system ANSI code page 1523;com.code_page= 1524 1525; The version of the .NET framework to use. The value of the setting are the first three parts 1526; of the framework's version number, separated by dots, and prefixed with "v", e.g. "v4.0.30319". 1527;com.dotnet_version= 1528 1529[mbstring] 1530; language for internal character representation. 1531; This affects mb_send_mail() and mbstring.detect_order. 1532; https://php.net/mbstring.language 1533;mbstring.language = Japanese 1534 1535; Use of this INI entry is deprecated, use global internal_encoding instead. 1536; internal/script encoding. 1537; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*) 1538; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 1539; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 1540;mbstring.internal_encoding = 1541 1542; Use of this INI entry is deprecated, use global input_encoding instead. 1543; http input encoding. 1544; mbstring.encoding_translation = On is needed to use this setting. 1545; If empty, default_charset or input_encoding or mbstring.input is used. 1546; The precedence is: default_charset < input_encoding < mbstring.http_input 1547; https://php.net/mbstring.http-input 1548;mbstring.http_input = 1549 1550; Use of this INI entry is deprecated, use global output_encoding instead. 1551; http output encoding. 1552; mb_output_handler must be registered as output buffer to function. 1553; If empty, default_charset or output_encoding or mbstring.http_output is used. 1554; The precedence is: default_charset < output_encoding < mbstring.http_output 1555; To use an output encoding conversion, mbstring's output handler must be set 1556; otherwise output encoding conversion cannot be performed. 1557; https://php.net/mbstring.http-output 1558;mbstring.http_output = 1559 1560; enable automatic encoding translation according to 1561; mbstring.internal_encoding setting. Input chars are 1562; converted to internal encoding by setting this to On. 1563; Note: Do _not_ use automatic encoding translation for 1564; portable libs/applications. 1565; https://php.net/mbstring.encoding-translation 1566;mbstring.encoding_translation = Off 1567 1568; automatic encoding detection order. 1569; "auto" detect order is changed according to mbstring.language 1570; https://php.net/mbstring.detect-order 1571;mbstring.detect_order = auto 1572 1573; substitute_character used when character cannot be converted 1574; one from another 1575; https://php.net/mbstring.substitute-character 1576;mbstring.substitute_character = none 1577 1578; Enable strict encoding detection. 1579;mbstring.strict_detection = Off 1580 1581; This directive specifies the regex pattern of content types for which mb_output_handler() 1582; is activated. 1583; Default: mbstring.http_output_conv_mimetypes=^(text/|application/xhtml\+xml) 1584;mbstring.http_output_conv_mimetypes= 1585 1586; This directive specifies maximum stack depth for mbstring regular expressions. It is similar 1587; to the pcre.recursion_limit for PCRE. 1588;mbstring.regex_stack_limit=100000 1589 1590; This directive specifies maximum retry count for mbstring regular expressions. It is similar 1591; to the pcre.backtrack_limit for PCRE. 1592;mbstring.regex_retry_limit=1000000 1593 1594[gd] 1595; Tell the jpeg decode to ignore warnings and try to create 1596; a gd image. The warning will then be displayed as notices 1597; disabled by default 1598; https://php.net/gd.jpeg-ignore-warning 1599;gd.jpeg_ignore_warning = 1 1600 1601[exif] 1602; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS. 1603; With mbstring support this will automatically be converted into the encoding 1604; given by corresponding encode setting. When empty mbstring.internal_encoding 1605; is used. For the decode settings you can distinguish between motorola and 1606; intel byte order. A decode setting must not be empty. 1607; https://php.net/exif.encode-unicode 1608;exif.encode_unicode = ISO-8859-15 1609 1610; https://php.net/exif.decode-unicode-motorola 1611;exif.decode_unicode_motorola = UCS-2BE 1612 1613; https://php.net/exif.decode-unicode-intel 1614;exif.decode_unicode_intel = UCS-2LE 1615 1616; https://php.net/exif.encode-jis 1617;exif.encode_jis = 1618 1619; https://php.net/exif.decode-jis-motorola 1620;exif.decode_jis_motorola = JIS 1621 1622; https://php.net/exif.decode-jis-intel 1623;exif.decode_jis_intel = JIS 1624 1625[Tidy] 1626; The path to a default tidy configuration file to use when using tidy 1627; https://php.net/tidy.default-config 1628;tidy.default_config = /usr/local/lib/php/default.tcfg 1629 1630; Should tidy clean and repair output automatically? 1631; WARNING: Do not use this option if you are generating non-html content 1632; such as dynamic images 1633; https://php.net/tidy.clean-output 1634tidy.clean_output = Off 1635 1636[soap] 1637; Enables or disables WSDL caching feature. 1638; https://php.net/soap.wsdl-cache-enabled 1639soap.wsdl_cache_enabled=1 1640 1641; Sets the directory name where SOAP extension will put cache files. 1642; https://php.net/soap.wsdl-cache-dir 1643soap.wsdl_cache_dir="/tmp" 1644 1645; (time to live) Sets the number of second while cached file will be used 1646; instead of original one. 1647; https://php.net/soap.wsdl-cache-ttl 1648soap.wsdl_cache_ttl=86400 1649 1650; Sets the size of the cache limit. (Max. number of WSDL files to cache) 1651soap.wsdl_cache_limit = 5 1652 1653[sysvshm] 1654; A default size of the shared memory segment 1655;sysvshm.init_mem = 10000 1656 1657[ldap] 1658; Sets the maximum number of open links or -1 for unlimited. 1659ldap.max_links = -1 1660 1661[dba] 1662;dba.default_handler= 1663 1664[opcache] 1665; Determines if Zend OPCache is enabled 1666;opcache.enable=1 1667 1668; Determines if Zend OPCache is enabled for the CLI version of PHP 1669;opcache.enable_cli=0 1670 1671; The OPcache shared memory storage size. 1672;opcache.memory_consumption=128 1673 1674; The amount of memory for interned strings in Mbytes. 1675;opcache.interned_strings_buffer=8 1676 1677; The maximum number of keys (scripts) in the OPcache hash table. 1678; Only numbers between 200 and 1000000 are allowed. 1679;opcache.max_accelerated_files=10000 1680 1681; The maximum percentage of "wasted" memory until a restart is scheduled. 1682;opcache.max_wasted_percentage=5 1683 1684; When this directive is enabled, the OPcache appends the current working 1685; directory to the script key, thus eliminating possible collisions between 1686; files with the same name (basename). Disabling the directive improves 1687; performance, but may break existing applications. 1688;opcache.use_cwd=1 1689 1690; When disabled, you must reset the OPcache manually or restart the 1691; webserver for changes to the filesystem to take effect. 1692;opcache.validate_timestamps=1 1693 1694; How often (in seconds) to check file timestamps for changes to the shared 1695; memory storage allocation. ("1" means validate once per second, but only 1696; once per request. "0" means always validate) 1697;opcache.revalidate_freq=2 1698 1699; Enables or disables file search in include_path optimization 1700;opcache.revalidate_path=0 1701 1702; If disabled, all PHPDoc comments are dropped from the code to reduce the 1703; size of the optimized code. 1704;opcache.save_comments=1 1705 1706; If enabled, compilation warnings (including notices and deprecations) will 1707; be recorded and replayed each time a file is included. Otherwise, compilation 1708; warnings will only be emitted when the file is first cached. 1709;opcache.record_warnings=0 1710 1711; Allow file existence override (file_exists, etc.) performance feature. 1712;opcache.enable_file_override=0 1713 1714; A bitmask, where each bit enables or disables the appropriate OPcache 1715; passes 1716;opcache.optimization_level=0x7FFFBFFF 1717 1718;opcache.dups_fix=0 1719 1720; The location of the OPcache blacklist file (wildcards allowed). 1721; Each OPcache blacklist file is a text file that holds the names of files 1722; that should not be accelerated. The file format is to add each filename 1723; to a new line. The filename may be a full path or just a file prefix 1724; (i.e., /var/www/x blacklists all the files and directories in /var/www 1725; that start with 'x'). Line starting with a ; are ignored (comments). 1726;opcache.blacklist_filename= 1727 1728; Allows exclusion of large files from being cached. By default all files 1729; are cached. 1730;opcache.max_file_size=0 1731 1732; How long to wait (in seconds) for a scheduled restart to begin if the cache 1733; is not being accessed. 1734;opcache.force_restart_timeout=180 1735 1736; OPcache error_log file name. Empty string assumes "stderr". 1737;opcache.error_log= 1738 1739; All OPcache errors go to the Web server log. 1740; By default, only fatal errors (level 0) or errors (level 1) are logged. 1741; You can also enable warnings (level 2), info messages (level 3) or 1742; debug messages (level 4). 1743;opcache.log_verbosity_level=1 1744 1745; Preferred Shared Memory back-end. Leave empty and let the system decide. 1746;opcache.preferred_memory_model= 1747 1748; Protect the shared memory from unexpected writing during script execution. 1749; Useful for internal debugging only. 1750;opcache.protect_memory=0 1751 1752; Allows calling OPcache API functions only from PHP scripts which path is 1753; started from specified string. The default "" means no restriction 1754;opcache.restrict_api= 1755 1756; Mapping base of shared memory segments (for Windows only). All the PHP 1757; processes have to map shared memory into the same address space. This 1758; directive allows to manually fix the "Unable to reattach to base address" 1759; errors. 1760;opcache.mmap_base= 1761 1762; Facilitates multiple OPcache instances per user (for Windows only). All PHP 1763; processes with the same cache ID and user share an OPcache instance. 1764;opcache.cache_id= 1765 1766; Enables and sets the second level cache directory. 1767; It should improve performance when SHM memory is full, at server restart or 1768; SHM reset. The default "" disables file based caching. 1769;opcache.file_cache= 1770 1771; Enables or disables opcode caching in shared memory. 1772;opcache.file_cache_only=0 1773 1774; Enables or disables checksum validation when script loaded from file cache. 1775;opcache.file_cache_consistency_checks=1 1776 1777; Implies opcache.file_cache_only=1 for a certain process that failed to 1778; reattach to the shared memory (for Windows only). Explicitly enabled file 1779; cache is required. 1780;opcache.file_cache_fallback=1 1781 1782; Enables or disables copying of PHP code (text segment) into HUGE PAGES. 1783; Under certain circumstances (if only a single global PHP process is 1784; started from which all others fork), this can increase performance 1785; by a tiny amount because TLB misses are reduced. On the other hand, this 1786; delays PHP startup, increases memory usage and degrades performance 1787; under memory pressure - use with care. 1788; Requires appropriate OS configuration. 1789;opcache.huge_code_pages=0 1790 1791; Validate cached file permissions. 1792;opcache.validate_permission=0 1793 1794; Prevent name collisions in chroot'ed environment. 1795;opcache.validate_root=0 1796 1797; If specified, it produces opcode dumps for debugging different stages of 1798; optimizations. 1799;opcache.opt_debug_level=0 1800 1801; Specifies a PHP script that is going to be compiled and executed at server 1802; start-up. 1803; https://php.net/opcache.preload 1804;opcache.preload= 1805 1806; Preloading code as root is not allowed for security reasons. This directive 1807; facilitates to let the preloading to be run as another user. 1808; https://php.net/opcache.preload_user 1809;opcache.preload_user= 1810 1811; Prevents caching files that are less than this number of seconds old. It 1812; protects from caching of incompletely updated files. In case all file updates 1813; on your site are atomic, you may increase performance by setting it to "0". 1814;opcache.file_update_protection=2 1815 1816; Absolute path used to store shared lockfiles (for *nix only). 1817;opcache.lockfile_path=/tmp 1818 1819[curl] 1820; A default value for the CURLOPT_CAINFO option. This is required to be an 1821; absolute path. 1822;curl.cainfo = 1823 1824[openssl] 1825; The location of a Certificate Authority (CA) file on the local filesystem 1826; to use when verifying the identity of SSL/TLS peers. Most users should 1827; not specify a value for this directive as PHP will attempt to use the 1828; OS-managed cert stores in its absence. If specified, this value may still 1829; be overridden on a per-stream basis via the "cafile" SSL stream context 1830; option. 1831;openssl.cafile= 1832 1833; If openssl.cafile is not specified or if the CA file is not found, the 1834; directory pointed to by openssl.capath is searched for a suitable 1835; certificate. This value must be a correctly hashed certificate directory. 1836; Most users should not specify a value for this directive as PHP will 1837; attempt to use the OS-managed cert stores in its absence. If specified, 1838; this value may still be overridden on a per-stream basis via the "capath" 1839; SSL stream context option. 1840;openssl.capath= 1841 1842[ffi] 1843; FFI API restriction. Possible values: 1844; "preload" - enabled in CLI scripts and preloaded files (default) 1845; "false" - always disabled 1846; "true" - always enabled 1847;ffi.enable=preload 1848 1849; List of headers files to preload, wildcard patterns allowed. 1850;ffi.preload= 1851