Просмотр исходного кода

PHP security configuration hardening

Disable HTML errors
Validate opcache permissions and root directory
Kristan Kenney 6 лет назад
Родитель
Сommit
76ae0e0289
1 измененных файлов с 3 добавлено и 3 удалено
  1. 3 3
      src/deb/php/php.ini

+ 3 - 3
src/deb/php/php.ini

@@ -549,7 +549,7 @@ report_memleaks = On
 ; Development Value: On
 ; Production value: On
 ; http://php.net/html-errors
-html_errors = On
+;html_errors = On
 
 ; If html_errors is set to On *and* docref_root is not empty, then PHP
 ; produces clickable error messages that direct to a page describing the error
@@ -1907,10 +1907,10 @@ ldap.max_links = -1
 ;opcache.huge_code_pages=1
 
 ; Validate cached file permissions.
-;opcache.validate_permission=0
+opcache.validate_permission=1
 
 ; Prevent name collisions in chroot'ed environment.
-;opcache.validate_root=0
+opcache.validate_root=1
 
 ; If specified, it produces opcode dumps for debugging different stages of
 ; optimizations.