Originally posted by BuzzLY
Interesting. I hear what you're saying, but when we installed PHP (version 4.2.2) on our Apache server, it was (and still is) set to "Off." It seems strange that they wouldn't set the default setting to the recommended setting, doesn't it? <shrug>
Maybe this'll explain:
#ls /usr/local/lib/ | grep php
libphp4.so
php
php.ini
php.ini-dist
php.ini-recommended
#diff php.ini php.ini-dist
; This is the default settings file for new PHP installations.
; By default, PHP installs itself with a configuration suitable for
; development purposes, and NOT for production purposes.
; For several security-oriented considerations that should be taken
; before going online with your site, please consult php.ini-recommended
; and http://php.net/manual/en/security.php.
6,73c17,60
;
; This is the recommended, PHP 4-style version of the php.ini-dist file. It
; sets some non standard settings, that make PHP more efficient, more secure,
; and encourage cleaner coding.
; The price is that with these settings, PHP may be incompatible with some
; applications, and sometimes, more difficult to develop with. Using this
; file is warmly recommended for production sites. As all of the changes from
; the standard settings are thoroughly documented, you can go over each one,
; and decide whether you want to use it or not.
🙂 dalecosp