Commit Graph

90 Commits

Author SHA1 Message Date
Yasuo Ohgaki
fd428a4882 This option should be left enabled by default by mistake.
--enable-trans-sid option is removed and this option should
be disabled by default in php.ini.

1) It's insecure by nature
2) It may not work well always
3) It wasn't enabled by default used be
4) It risks security and user should enable it after realizing
   it's security risks.
2002-07-19 09:45:07 +00:00
Yasuo Ohgaki
658503f6ee Move down open_basedir description. 2002-07-18 01:36:17 +00:00
Yasuo Ohgaki
02bc91f0bc Fixed open_basedir note - thanks to Sander. I also notice I have to modify pg_lo_import(), etc. It does not check open_basedir at all. It checks UID/GID, though. We are better to note how we should treat files in coding standard. 2002-07-17 04:20:37 +00:00
Yasuo Ohgaki
ccc04b7096 Added note for open_basedir 2002-07-17 00:09:09 +00:00
Georg Richter
ab863dee30 Added php.ini option "mysql_connection.timeout" 2002-07-16 13:52:23 +00:00
Rui Hirokawa
555ca8eedd added mbstring.language option in ext/mbstring. 2002-07-11 15:45:35 +00:00
Derick Rethans
d812929d2f - Implement Andrei's request for disabling memory leak reporting in debug
builds.
#- Andrei: I can show you the logs :)
2002-06-26 19:43:46 +00:00
Markus Fischer
c0736d6096 - List new session.use_only_cookies option. 2002-06-16 06:05:23 +00:00
Frank M. Kromann
4b40b9513b Adding ini setting for max_procs 2002-06-10 20:00:20 +00:00
Sander Roobol
a6abfcbbe7 Update cracklib path and comment it out (thanks to Urs Gehrig for the hint) 2002-06-01 09:53:07 +00:00
Sander Roobol
295e8e5bd4 It's get_cfg_var() not cfg_get_var() 2002-05-19 14:16:41 +00:00
Frank M. Kromann
31a16f63f9 Adding ini setting that allows the MSSQL extension to use NT authentication 2002-05-09 20:36:40 +00:00
Rasmus Lerdorf
22182fc78d # Since Jani seems to have us all on /ignore, I'm reverting 2002-04-27 13:38:55 +00:00
foobar
f0de9845f8 Default setting for short_open_tag is better be Off. 2002-04-26 23:20:06 +00:00
foobar
a49d98b499 fixed the comment.. 2002-04-24 01:51:12 +00:00
Yasuo Ohgaki
e59e3884b6 Added mbstring.func_overload directive 2002-04-19 07:13:55 +00:00
Yasuo Ohgaki
fd89d2d24a Added description to mbstring ini entries 2002-04-19 06:30:14 +00:00
Marcus Boerger
bd9cf79efb new ini setting log_errors_max_len
@-New ini setting log_errors_max_len controls maximum length for error
@ messages. Set it to 0 for infinite. Default is 1024 (old behaviour) (Marcus)
2002-04-10 01:27:44 +00:00
foobar
80131be70f Removed relics from PHP3. 2002-04-07 17:46:57 +00:00
Yasuo Ohgaki
efbb9949a5 Added pgsql.ignore_notice and pgsql.log_notice ini entry. 2002-04-07 06:11:41 +00:00
Marcus Boerger
ddc6437e32 new feature ignoring repeated error messages (defaults to old behaviour)
@You can now disable logging of repeated error messages with two new ini settings ignore_repeated_errors, ignore_repeated_source. @(Marcus)
2002-04-06 18:49:59 +00:00
Sander Roobol
4e8f9e2585 Added crack extension to php.ini-* 2002-03-29 16:32:23 +00:00
Sebastian Bergmann
f6102f7300 ext/overload is a 'built-in' extension on Win32. 2002-03-21 06:25:42 +00:00
Shane Caraveo
391fdf858e add new ini item for fastcgi 2002-03-18 04:49:16 +00:00
Shane Caraveo
28c5d0f045 document force-redirect in php.ini 2002-03-01 02:09:59 +00:00
Sebastian Bergmann
07f95b3a79 Add MSVC workspace for tokenizer extension. Add php_tokenizer.dll entries to php.ini-*. 2002-02-08 21:19:55 +00:00
Yasuo Ohgaki
e19be6171f Added "pgsql.auto_reset_persistent" ini entry to catch broken connection
always with pg_pconnect(). (Default Off in source and php.ini-*)
This option requires a little overhead for pg_pconnect().
2002-01-25 00:51:03 +00:00
Marko Karppinen
f03933bcec Corrected a confusing comment (see bug #14972) 2002-01-24 14:25:51 +00:00
Frank M. Kromann
55b5cb89bf Fixing spelling error in FrontBase section 2002-01-23 17:47:46 +00:00
foobar
1d062f3f6e Make it more clear what session.referer_check is about. 2001-12-05 00:32:23 +00:00
Sebastian Bergmann
7c4daf11c0 Nuke ext/sablot entries. 2001-11-26 10:55:46 +00:00
foobar
6f5fc0be54 Added missing ini directive: always_populate_raw_po st_data 2001-11-24 23:47:10 +00:00
Sebastian Bergmann
1a082a349c Add php_w32api.dll 2001-11-08 07:07:11 +00:00
Sebastian Bergmann
b1322f570c Synch with persistant -> persistent changes to ext/fbsql. 2001-10-31 18:09:17 +00:00
foobar
609271e651 - Prevent PHP from starting if output_handler is set and
zlib.output_compression is on
- Added notes to the bundled php.ini files about this.
2001-10-27 05:22:19 +00:00
Sebastian Bergmann
6c5d688dee Add php_overload.dll. 2001-10-18 08:53:08 +00:00
Stanislav Malyshev
73b5401fc9 Fix typo - comment is ; not ' 2001-10-03 11:35:51 +00:00
foobar
3a044786f8 revert bad commit 2001-09-05 19:48:28 +00:00
Jeroen van Wolffelaar
820d28affe Add random number generator-entry to INI-files 2001-08-25 00:11:03 +00:00
Zeev Suraski
c6202789a4 Update php.ini-recommended 2001-08-17 14:04:30 +00:00
John Donagher
d53cb7cd2f Update hostname 2001-08-14 20:23:26 +00:00
Zeev Suraski
afedca1ff6 Enable output buffering in the php.ini-recommended 2001-08-12 22:42:36 +00:00
Zeev Suraski
90aa90b967 - Update php.ini-dist
- Sync php.ini-recommended with php.ini-dist
2001-08-11 22:55:35 +00:00
Zeev Suraski
6cb427bd12 update 2001-08-11 15:26:11 +00:00
Zeev Suraski
860b591299 Start pushing register_globals annihilation 2001-08-11 15:22:56 +00:00
Anil Madhavapeddy
dc2e12253f fix a few typos 2001-08-11 02:53:57 +00:00
foobar
2b6b6b4324 Added missing entries. 2001-08-09 00:28:33 +00:00
Daniel Beulshausen
289770bf61 let ext\shmop build under win32 2001-08-07 13:33:27 +00:00
James E. Flemer
771e3e498f o Fixed Bug #12121: chdir and safe_mode
- [ main/safe_mode.h ] added new checkuid mode:
    CHECKUID_ALLOW_ONLY_FILE: skips directory check if file check
	fails

  - [ ext/standard/dir.c ] changed php_checkuid() to use
    CHECKUID_ALLOW_ONLY_FILE instead of CHECKUID_ALLOW_ONLY_DIR

  - [ main/safe_mode.c ] added code for new checkuid mode

o Fixed Bug #12119: safe mode owner check can be bypassed with symlink
  - [ main/safe_mode.c ] use VCWD_REALPATH to resolve destination
    of symlink before trimming filename

o New Feature: safe_mode_include_dir (php.ini directive)
  - Allows bypassing UID/GID checks when including files
    from the directory in safe_mode_include_dir and its
	subdirectories. (safe_mode must be on, directory must
	also be in include_path or full path must be used when
	including)

o Fixed Feature: safe_mode_gid (php.ini directive)
  - Correctly check (and report) UID/GID bits on directories

o Changed include() fall back to scripts cwd implementation
  - CWD added to the (local) search path in php_fopen_with_path()
    instead of seperate case. [ main/fopen_wrappers.c ]
2001-07-13 18:21:21 +00:00
Rasmus Lerdorf
934e10c7dc Add getmygid() and safe_mode_gid ini directive to allow safe mode to do
a gid check instead of a uid check.
@ - Add getmygid() and safe_mode_gid ini directive to allow safe mode to do
@ a gid check instead of a uid check. (James E. Flemer, Rasmus)
2001-07-09 17:36:04 +00:00