| @@ -0,0 +1,452 @@
+---
+ php.ini-recommended | 307 ++--------------------------------------------------
+ 1 file changed, 15 insertions(+), 292 deletions(-)
+
+--- php.ini-recommended.orig
++++ php.ini-recommended
+@@ -244,7 +244,9 @@ safe_mode_allowed_env_vars = PHP_
+ ; This directive contains a comma-delimited list of environment variables that
+ ; the end user won't be able to change using putenv(). These variables will be
+ ; protected even if safe_mode_allowed_env_vars is set to allow to change them.
+-safe_mode_protected_env_vars = LD_LIBRARY_PATH
++; the default is the same list ld.so uses when starting a setuid binary
++safe_mode_protected_env_vars = GCONV_PATH,GETCONF_DIR,HOSTALIASES,LD_AUDIT,LD_DEBUG,LD_DEBUG_OUTPUT,LD_DYNAMIC_WEAK,LD_LIBRARY_PATH,LD_ORIGIN_PATH,LD_PRELOAD,LD_PROFILE,LD_SHOW_AUXV,LD_USE_LOAD_BIAS,LOCALDOMAIN,LOCPATH,MALLOC_TRACE,NLSPATH,RESOLV_HOST_CONF,RES_OPTIONS,TMPDIR,TZDIR
++
+
+ ; open_basedir, if set, limits all file operations to the defined directory
+ ; and below. This directive makes most sense if used in a per-directory
+@@ -406,7 +408,7 @@ track_errors = Off
+
+ ; Disable the inclusion of HTML tags in error messages.
+ ; Note: Never use this feature for production boxes.
+-;html_errors = Off
++html_errors = Off
+
+ ; If html_errors is set On PHP produces clickable error messages that direct
+ ; to a page describing the error or function causing the error in detail.
+@@ -516,7 +518,7 @@ default_mimetype = "text/html"
+ ;;;;;;;;;;;;;;;;;;;;;;;;;
+
+ ; UNIX: "/path1:/path2"
+-;include_path = ".:/php/includes"
++include_path = ".:/usr/share/php5:/usr/share/php5/PEAR"
+ ;
+ ; Windows: "\path1;\path2"
+ ;include_path = ".;c:\php\includes"
+@@ -533,12 +535,12 @@ doc_root =
+ user_dir =
+
+ ; Directory in which the loadable extensions (modules) reside.
+-extension_dir = "./"
++extension_dir = @extdir@
+
+ ; Whether or not to enable the dl() function. The dl() function does NOT work
+ ; properly in multithreaded servers, such as IIS or Zeus, and is automatically
+ ; disabled on them.
+-enable_dl = On
++enable_dl = Off
+
+ ; cgi.force_redirect is necessary to provide security running PHP as a CGI under
+ ; most web servers. Left undefined, PHP turns this on by default. You can
+@@ -591,7 +593,7 @@ file_uploads = On
+
+ ; Temporary directory for HTTP uploaded files (will use system default if not
+ ; specified).
+-;upload_tmp_dir =
++upload_tmp_dir = "/tmp"
+
+ ; Maximum allowed size for uploaded files.
+ upload_max_filesize = 2M
+@@ -623,81 +625,6 @@ default_socket_timeout = 60
+ ; fgets() and file() will work regardless of the source of the file.
+ ; auto_detect_line_endings = Off
+
+-
+-;;;;;;;;;;;;;;;;;;;;;;
+-; Dynamic Extensions ;
+-;;;;;;;;;;;;;;;;;;;;;;
+-;
+-; If you wish to have an extension loaded automatically, use the following
+-; syntax:
+-;
+-; extension=modulename.extension
+-;
+-; For example, on Windows:
+-;
+-; extension=msql.dll
+-;
+-; ... or under UNIX:
+-;
+-; extension=msql.so
+-;
+-; Note that it should be the name of the module only; no directory information
+-; needs to go here. Specify the location of the extension with the
+-; extension_dir directive above.
+-
+-
+-; Windows Extensions
+-; Note that ODBC support is built in, so no dll is needed for it.
+-; Note that many DLL files are located in the extensions/ (PHP 4) ext/ (PHP 5)
+-; extension folders as well as the separate PECL DLL download (PHP 5).
+-; Be sure to appropriately set the extension_dir directive.
+-
+-;extension=php_bz2.dll
+-;extension=php_curl.dll
+-;extension=php_dba.dll
+-;extension=php_dbase.dll
+-;extension=php_exif.dll
+-;extension=php_fdf.dll
+-;extension=php_gd2.dll
+-;extension=php_gettext.dll
+-;extension=php_gmp.dll
+-;extension=php_ifx.dll
+-;extension=php_imap.dll
+-;extension=php_interbase.dll
+-;extension=php_ldap.dll
+-;extension=php_mbstring.dll
+-;extension=php_mcrypt.dll
+-;extension=php_mhash.dll
+-;extension=php_mime_magic.dll
+-;extension=php_ming.dll
+-;extension=php_msql.dll
+-;extension=php_mssql.dll
+-;extension=php_mysql.dll
+-;extension=php_mysqli.dll
+-;extension=php_oci8.dll
+-;extension=php_openssl.dll
+-;extension=php_pdo.dll
+-;extension=php_pdo_firebird.dll
+-;extension=php_pdo_mssql.dll
+-;extension=php_pdo_mysql.dll
+-;extension=php_pdo_oci.dll
+-;extension=php_pdo_oci8.dll
+-;extension=php_pdo_odbc.dll
+-;extension=php_pdo_pgsql.dll
+-;extension=php_pdo_sqlite.dll
+-;extension=php_pgsql.dll
+-;extension=php_pspell.dll
+-;extension=php_shmop.dll
+-;extension=php_snmp.dll
+-;extension=php_soap.dll
+-;extension=php_sockets.dll
+-;extension=php_sqlite.dll
+-;extension=php_sybase_ct.dll
+-;extension=php_tidy.dll
+-;extension=php_xmlrpc.dll
+-;extension=php_xsl.dll
+-;extension=php_zip.dll
+-
+ ;;;;;;;;;;;;;;;;;;;
+ ; Module Settings ;
+ ;;;;;;;;;;;;;;;;;;;
+@@ -745,12 +672,6 @@ default_socket_timeout = 60
+ define_syslog_variables = Off
+
+ [mail function]
+-; For Win32 only.
+-SMTP = localhost
+-smtp_port = 25
+-
+-; For Win32 only.
+-;sendmail_from = me@example.com
+
+ ; For Unix only. You may supply arguments as well (default: "sendmail -t -i").
+ ;sendmail_path =
+@@ -769,7 +690,7 @@ sql.safe_mode = Off
+ ;odbc.default_pw = Not yet implemented
+
+ ; Allow or prevent persistent links.
+-odbc.allow_persistent = On
++odbc.allow_persistent = Off
+
+ ; Check that a connection is still valid before reuse.
+ odbc.check_persistent = On
+@@ -791,7 +712,7 @@ odbc.defaultbinmode = 1
+
+ [MySQL]
+ ; Allow or prevent persistent links.
+-mysql.allow_persistent = On
++mysql.allow_persistent = Off
+
+ ; Maximum number of persistent links. -1 means no limit.
+ mysql.max_persistent = -1
+@@ -860,50 +781,9 @@ mysqli.default_pw =
+ ; Allow or prevent reconnect
+ mysqli.reconnect = Off
+
+-[mSQL]
+-; Allow or prevent persistent links.
+-msql.allow_persistent = On
+-
+-; Maximum number of persistent links. -1 means no limit.
+-msql.max_persistent = -1
+-
+-; Maximum number of links (persistent+non persistent). -1 means no limit.
+-msql.max_links = -1
+-
+-[OCI8]
+-; enables privileged connections using external credentials (OCI_SYSOPER, OCI_SYSDBA)
+-;oci8.privileged_connect = Off
+-
+-; Connection: The maximum number of persistent OCI8 connections per
+-; process. Using -1 means no limit.
+-;oci8.max_persistent = -1
+-
+-; Connection: The maximum number of seconds a process is allowed to
+-; maintain an idle persistent connection. Using -1 means idle
+-; persistent connections will be maintained forever.
+-;oci8.persistent_timeout = -1
+-
|
