summaryrefslogtreecommitdiff
path: root/php.ini-production
diff options
context:
space:
mode:
Diffstat (limited to 'php.ini-production')
-rw-r--r--php.ini-production12
1 files changed, 12 insertions, 0 deletions
diff --git a/php.ini-production b/php.ini-production
index 35a4ddd85a..a2c3240aaa 100644
--- a/php.ini-production
+++ b/php.ini-production
@@ -759,6 +759,11 @@ enable_dl = Off
; http://php.net/cgi.fix-pathinfo
;cgi.fix_pathinfo=1
+; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside
+; of the web tree and people will not be able to circumvent .htaccess security.
+; http://php.net/cgi.dicard-path
+;cgi.discard_path=1
+
; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
; security tokens of the calling client. This allows IIS to define the
; security context that the request runs under. mod_fastcgi under Apache
@@ -779,6 +784,13 @@ enable_dl = Off
; http://php.net/cgi.rfc2616-headers
;cgi.rfc2616_headers = 0
+; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #!
+; (shebang) at the top of the running script. This line might be needed if the
+; script support running both as stand-alone script and via PHP CGI<. PHP in CGI
+; mode skips this line and ignores its content if this directive is turned on.
+; http://php.net/cgi.check-shebang-line
+;cgi.check_shebang_line=1
+
;;;;;;;;;;;;;;;;
; File Uploads ;
;;;;;;;;;;;;;;;;