| Mode | Meaning |
|---|---|
| PHP_INI_USER | Entry can be set in user scripts (like with ini_set()) |
| PHP_INI_PERDIR | Entry can be set in php.ini, .htaccess or httpd.conf |
| PHP_INI_SYSTEM | Entry can be set in php.ini or httpd.conf |
| PHP_INI_ALL | Entry can be set anywhere |
Limits all file operations to the defined directory and below. This directive makes most sense if used in a per-directory or per-virtualhost web server configuration file.
Also it is prudent to disable symlink() function
Disable certain PHP functions from executing. Will throw a security warning error when they are used in code.
Adds a header to the HTTP response detailing the PHP version used.
Includes error output with script execution.
Displays errors with HTML tags
Maximum size of POST data that PHP will accept.
Allows loading external PHP modules
Allows uploading files.
The max filesize of an uploaded file.
Maximum number of files that can be uploaded via a single request.
Whether to allow the treatment of URLs (like http: or ftp:) as files.
Whether to allow include/require to open URLs (like http: or ftp:) as files.
This option enables administrators to make their users invulnerable to attacks which involve passing session ids in URLs
Whether or not to add the httpOnly flag to the cookie, which makes it inaccessible to browser scripting languages such as JavaScript.
Allows you to specify the hash algorithm used to generate the session IDs. '0' means MD5 (128 bits) and '1' means SHA-1 (160 bits).