@@ -306,12 +306,12 @@ serialize_precision = -1
306306; http://php.net/open-basedir
307307; open_basedir =
308308
309- ; This directive allows you to disable certain functions for security reasons .
309+ ; This directive allows you to disable certain functions.
310310; It receives a comma-delimited list of function names.
311311; http://php.net/disable-functions
312312disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,passthru,system,proc_open,popen,show_source,
313313
314- ; This directive allows you to disable certain classes for security reasons .
314+ ; This directive allows you to disable certain classes.
315315; It receives a comma-delimited list of class names.
316316; http://php.net/disable-classes
317317disable_classes =
@@ -404,7 +404,7 @@ max_input_time = 120
404404; How many GET/POST/COOKIE input variables may be accepted
405405; max_input_vars = 1000
406406
407- ; Maximum amount of memory a script may consume (128MB)
407+ ; Maximum amount of memory a script may consume
408408; http://php.net/memory-limit
409409memory_limit = 128M
410410
@@ -1390,7 +1390,8 @@ session.cookie_domain =
13901390session.cookie_httponly =
13911391
13921392; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF)
1393- ; Current valid values are "Lax" or "Strict"
1393+ ; Current valid values are "Strict", "Lax" or "None". When using "None",
1394+ ; make sure to include the quotes, as `none` is interpreted like `false` in ini files.
13941395; https://tools.ietf.org/html/draft-west-first-party-cookies-07
13951396session.cookie_samesite =
13961397
@@ -1426,8 +1427,8 @@ session.gc_maxlifetime = 1440
14261427; (see session.save_path above), then garbage collection does *not*
14271428; happen automatically. You will need to do your own garbage
14281429; collection through a shell script, cron entry, or some other method.
1429- ; For example, the following script would is the equivalent of
1430- ; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
1430+ ; For example, the following script is the equivalent of setting
1431+ ; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
14311432; find /path/to/sessions -cmin +24 -type f | xargs rm
14321433
14331434; Check HTTP Referer to invalidate externally stored URLs containing ids.
0 commit comments