From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Fri, 23 Jul 2010 11:50:14 +0000 (+0200)
Subject: php: Set some useful default options.
X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;h=aeb6a57aa9fd2c6567b85ac4b9ad1c60b7e3f563;p=matthijs%2Fservers%2Fdrsnuggles.git

php: Set some useful default options.

This disables stuff like magic quotes and other insecure stuff, sets the
loglevel, etc.
---

diff --git a/etc/php5/cgi/php.ini.local b/etc/php5/cgi/php.ini.local
index d1a8eb7..da03246 100644
--- a/etc/php5/cgi/php.ini.local
+++ b/etc/php5/cgi/php.ini.local
@@ -8,4 +8,27 @@ log_errors = On
 # Don't display errors to the client 
 display_errors = Off
 
+# Add E_USER_NOTICE, so trigger_error calls without a level actually get
+# logged.
+error_reporting  =  E_ALL & ~E_NOTICE | E_USER_NOTICE
+
+# Disable some features for increased security and reduced surprise.
+allow_call_time_pass_reference = Off
+register_long_arrays = Off
+register_argc_argv = Off
+magic_quotes_gpc = Off
+enable_dl = Off
+allow_url_fopen = Off
+
+
+# Use conforming headers (not sure how useful this is, though) 
+cgi.rfc2616_headers = 1
+
+# Conform to CGI spec
+# Needed for lighttpd (http://trac.lighttpd.net/trac/wiki/Docs%3AModCGI)
+cgi.fix_pathinfo = 1
+
+# Include some global php libraries
+include_path = "/var/www/php5-libs"
+
 # vim: set filetype=dosini: