NYCPHP Meetup

NYPHP.org

[nycphp-talk] PHundamentals Topic #4: php.ini settings

Mark Armendariz nyphp at enobrev.com
Wed Nov 12 18:19:14 EST 2003


Also, something I've noticed on my server, and I'm not sure if this is a
normal thing, but the .htaccess file works for all subdirectories and the
php.ini only works for the directory it's in.  I'm not sure if these are
server specific settings or just the way it is.   Anyone?

Mark

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Mark Armendariz
Sent: Wednesday, November 12, 2003 6:17 PM
To: 'NYPHP Talk'
Subject: RE: [nycphp-talk] PHundamentals Topic #4: php.ini settings

Sample local php.ini:
---------------------
include_path		= .:/path/to/global/includes:/path/to/local/includes
register_globals		= 0
error_reporting		= 2047
display_errors		= 1



Sample .htaccess
----------------
php_value include_path .:/path/to/global/includes:/path/to/local/includes
php_value register_globals 0
php_value error_reporting 2047
php_value display_errors 1


----
Mark

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org] On
Behalf Of Jeff Siegel
Sent: Wednesday, November 12, 2003 5:32 PM
To: 'NYPHP Talk'
Subject: RE: [nycphp-talk] PHundamentals Topic #4: php.ini settings

Can you show a sample of what the .htaccess file would look like?

Jeff Siegel

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of felix zaslavskiy
Sent: Wednesday, November 12, 2003 3:56 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] PHundamentals Topic #4: php.ini settings


On Wed, 12 Nov 2003 15:29:48 -0500
Michael Southwell <southwell at dneba.com> wrote:

> Settings in the php.ini file have an important effect on the 
> operation, security and reliability of your application.
> For example, setting register_globals to a value of "on" makes it
easier to
> pass variables from one script to another, but opens serious security 
> vulnerabilities--so best practice is always to set it "off."
> 

Alot of shared hosts set register_globals to off in their php.ini file.
If one needs to run scrip with register_globals to on then a nice trick
exists. In .htaccess file one  can set  'php_value register_globals 1'

Also I seen programs that dont like magic_quote_gpc to be set to 1 to its
one can also set that value to 0 in .htaccess file.

> What settings do you consider essential?  How should they be set, and
why?
> 
> In next month's PHundamentals, we'll discuss how to manage these
settings 
> most effectively.
> 
> ====================
> Jeff Siegel and Mike Southwell
> The PHundamentals Team
> 
> _______________________________________________
> talk mailing list
> talk at lists.nyphp.org
> http://lists.nyphp.org/mailman/listinfo/talk
> 


_______________________________________________
talk mailing list
talk at lists.nyphp.org
http://lists.nyphp.org/mailman/listinfo/talk

_______________________________________________
talk mailing list
talk at lists.nyphp.org
http://lists.nyphp.org/mailman/listinfo/talk



_______________________________________________
talk mailing list
talk at lists.nyphp.org
http://lists.nyphp.org/mailman/listinfo/talk






More information about the talk mailing list