Recently, the status is not good. The title that should be resolved in a few minutes is really unpleasant because it has been tossing for two hours at night. It seems necessary to record it, avoid reading comments during each configuration... today, I really saw a line missing .. 1) PHP configuration
Recently, the status is not good. The title that should be resolved in a few minutes is really unpleasant because it has been tossing for two hours at night. It seems necessary to record it, avoid reading comments during each configuration... today, I really saw a line missing ..
1) PHP configuration
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Error handling and logging;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
This part is error handling and log error_reporting
Some bitwise combinations are used to manage error types. If php. ini-disc is used, the default option is E_ALL &~ E_NOTICE. This part can be set with your use. I usually like E_ALL when writing debugging scripts. it is advantageous to treat some warnings as error handling whenever possible.
Display_errors
The default value is On, indicating that the error that meets the error_reporting option is output to the page. However, after it is declared to run, it is set to Off, which is also a suggestion in this option comment. the original article is as follows:
; Print out errors (as a part of the output). For production web sites,
; You're stronugly encouraged to turn this feature off, and use error logging
; Instead (see below). Keeping display_errors enabled on a production web site
; May reveal security information to end users, such as file paths on your Web
; Server, your database schema or other information.
Log_errors
The default value is Off. it is used to record errors that meet the error_reporting option to the file (the log file). We strongly recommend that you enable this option in comments, record errors to files instead of output to pages.
'You' re stronugly advised to use error logging in place of error displaying on production web sites .'
Log_errors_max_len
The maximum length of the log file. the default value is. there is no limit on the performance of 0 ..
Error_log
The default value is commented out. this option has two values: filename, which indicates the file to be recorded in the log; syslog, performance is recorded in the system log (note: This option only works for systems above NT and does not work for 9x)
;;;;;;;;;;;;;;;;;
; Data Handling;
;;;;;;;;;;;;;;;;;
This section describes some PHP Data processing options, many of which are also related to the Security title.
Register_globals
The default value is Off. The discussion of the role of this option is an old topic. it depends on personal habits. convenience is not false, but it will test the program.
Magic_quotes_gpc
The default is On, but my hobby is Off, open will have a certain obstacle to SQL injection, but it is only inevitable, not thorough .. specific can see the relevant articles of http://www.4ngel.net.
;;;;;;;;;;;;;;;;;;;;;;;;;
; Paths and Directories;
;;;;;;;;;;;;;;;;;;;;;;;;;
Some path settings (assuming your php path is c: \ php)
Include_path
Whether it is used or not, I have set to c: \ php \ pear, but the efficacy of pear is still very strong .. for details about pear see http://pear.php.net
Extension_dir
You can set it to c: \ php \ extensions.
Cgi. force_redirect
The default value is commented out. I have not figured out what this option is for. However, it can be used by default when apache is applied; disable this option in IIS clarification (set to 0 ). the official team said this, just do it.