summaryrefslogtreecommitdiff
path: root/php.ini-production
diff options
context:
space:
mode:
authorChristoph M. Becker <cmbecker69@gmx.de>2016-09-26 18:45:05 +0200
committerChristoph M. Becker <cmbecker69@gmx.de>2016-09-26 18:45:05 +0200
commitb3f4bc759253a8226fe7d9a2451ff169b4cd81ce (patch)
treef1d99fad0b92630073e51b79a471db9a6ce58a03 /php.ini-production
parent5e24fe9fde183eda239236aa18c96007d9ac7138 (diff)
parent5e102d5685a1bb2cf14dcc08728e6a2e6dcea18a (diff)
downloadphp-git-b3f4bc759253a8226fe7d9a2451ff169b4cd81ce.tar.gz
Merge branch 'PHP-7.0' into PHP-7.1
Diffstat (limited to 'php.ini-production')
-rw-r--r--php.ini-production12
1 files changed, 12 insertions, 0 deletions
diff --git a/php.ini-production b/php.ini-production
index 6cf245f85e..c90238f35b 100644
--- a/php.ini-production
+++ b/php.ini-production
@@ -774,6 +774,11 @@ enable_dl = Off
; http://php.net/cgi.fix-pathinfo
;cgi.fix_pathinfo=1
+; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside
+; of the web tree and people will not be able to circumvent .htaccess security.
+; http://php.net/cgi.dicard-path
+;cgi.discard_path=1
+
; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
; security tokens of the calling client. This allows IIS to define the
; security context that the request runs under. mod_fastcgi under Apache
@@ -794,6 +799,13 @@ enable_dl = Off
; http://php.net/cgi.rfc2616-headers
;cgi.rfc2616_headers = 0
+; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #!
+; (shebang) at the top of the running script. This line might be needed if the
+; script support running both as stand-alone script and via PHP CGI<. PHP in CGI
+; mode skips this line and ignores its content if this directive is turned on.
+; http://php.net/cgi.check-shebang-line
+;cgi.check_shebang_line=1
+
;;;;;;;;;;;;;;;;
; File Uploads ;
;;;;;;;;;;;;;;;;