PHP

1 min

this article contains a list of php configuration settings that can affect the security, performance and stability of passwork the location of the configuration file depends on the type of installation or os used linux deb — /etc/php/8 3/fpm/php ini rpm — /etc/php ini windows server — c \program files\php8 3\php ini docker /\<passwork>/conf/php/cli php ini /\<passwork>/conf/php/fpm php ini parameter name value important comment expose php off yes hides php version in web server response headers display errors off yes disables the output of php error information should always be off, as all errors are written to log files post max size 10mb limits the maximum size of data received from the client, which protects against dos attacks max execution time 120 to 600 maximum script execution time (in seconds) max input time 120 maximum time to read data from the client (in seconds) memory limit 256mb to 2gb maximum amount of ram that the script can use max input vars 1000 number of parameters in post request you can increase it if you have problems with importing large csv or json files session cookie lifetime 0 when set to 0, the browser does not store cookies and clears them on restart session use only cookies on yes the session ids will only be sent through cookies session use strict mode on yes php will not accept cookies with a session number that is set by the user and not issued by php protects against session fixation attacks session cookie httponly on yes denies access to cookies from javascript session cookie secure on yes cookies will only be accessible via https session use trans sid off yes prohibits the session id from being sent via get parameters session cache limiter nocache disables the cache session sid length 22 to 256 yes sets the length of a session id a longer number protects the session from being overridden session sid bits per character 5 yes maximum character variation in session id '4' (0 9, a f), '5' (0 9, a v), '6' (0 9, a z, a z, " ", ",") the value 6 is not supported session cookie domain if a single domain name is used, it can be specified in this parameter realpath cache size 4096k specifies the maximum amount of memory allocated for caching the results of the realpath() function realpath cache ttl 600 defines the time to live (ttl), in seconds, for items stored in the realpath cache