# Sign commenting is allowed only at the beginning of the line
Directive = allow_url_fopen
Default   = On
Type      = bool
Comment   = Allows PHP file functions to retrieve data from remote locations over FTP or HTTP. This option is a great security risk, thus do not turn it on without necessity.

Directive = allow_url_include
Default   = Off
Type      = bool

Directive = cgi.fix_pathinfo
Default   = Off
Type      = bool
Comment   = Cgi fix pathinfo

Directive = date.timezone
Default   = Europe/Moscow
Type      = value
Comment   = PHP scripts timezone

Directive = default_socket_timeout
Default   = 60
Type      = value
Comment   = Default timeout (in seconds) for socket based streams

Directive = disable_functions
Default   = popen, exec, ftp_exec, shell_exec, ini_restore, leak, mysql_list_dbs, pcntl_exec, syslog, virtual, apache_child_terminate, chgrp, dl, get_current_user, getmyuid, imap_body, imap_list, ini_restore, max_execution_time, mb_send_mail, passthru, pclose, posix, posix_ctermid, posix_getegid, posix_geteuid, posix_geteuid, posix_getgid, posix_getgid, posix_getgrgid, posix_getgrnam, posix_getgroups, posix_getlogin, posix_getpgid, posix_getpgrp, posix_getpid, posix_getppid, posix_getpwnam, posix_getpwuid, posix_getrlimit, posix_getsid, posix_getuid, posix_getuid, posix_isatty, posix_kill, posix_kill, posix_mkfifo, posix_mkfifo, posix_setegid, posix_seteuid, posix_setgid, posix_setpgid, posix_setpgid, posix_setsid, posix_setuid, posix_setuid, posix_times, posix_ttyname, posix_uname, proc_nice, show_source, system
Type      = value
Comment   = This directive allows you to disable certain functions for security reasons.

Directive = display_errors
Default   = Off
Type      = bool
Comment   = Determines whether errors should be printed to the screen as part of the output or if they should not be shown to a user.

Directive = error_reporting
Default   = E_ALL & ~E_NOTICE
Range     = ~E_ALL,E_ALL & ~E_NOTICE,E_ALL,E_ALL & ~E_DEPRECATED & ~E_STRICT
Type      = list
Comment   = The error reporting level.

Directive = file_uploads
Default   = On
Type      = bool
Comment   = Allows uploading files over HTTP.

Directive = include_path
Default   = .;/path/to/php/pear
Type      = value
Comment   = The list of directories where scripts look for files (similar to system's PATH variable). To separate directories, use a colon (:) For example: .:/dir/inc:/usr/lib/php

Directive = log_errors
Default   = Off
Type      = bool
Comment   = Tells whether to log errors. By default, errors are logged in the server's error log. Use the error_log directive to specify the path to your own log file.

Directive = magic_quotes_gpc
Default   = On
Type      = bool
Remark    = <5.4.0
Comment   = Sets the magic_quotes state for the GPC (Get, Post and Cookie) operations. When magic_quotes are on, all single-quotes, double quotes, backslashesand  special characters are escaped with the backslash automatically.

Directive = magic_quotes_runtime
Default   = On
Type      = bool
Remark    = <5.4.0
Comment   = Sets the magic_quotes_runtime

Directive = mail.force_extra_parameters
Type      = value
Comment   = Additional parameters for the mail() function used to send mail. For example, to use your custom Sendmail configuration: -C /dir/conf.cf

Directive = max_execution_time
Default   = 30
Type      = value
Comment   = The maximum time in seconds a script is allowed to run before it is terminated.

Directive = max_input_time
Default   = 60
Type      = value
Comment   = The maximum time in seconds a script is allowed to parse input data.

Directive = memory_limit
Default   = 256M
Type      = list
Range     = 64M,128M,192M,256M,368M,512M
Comment   = The maximum amount of memory in bytes a script is allowed to allocate. Set the value to -1 to have no memory limit (not recommended). Use shortcuts for byte values: K (kilo), M (mega), and G (giga). For example, 128M

Directive = mysql.connect_timeout
Default   = 60
Type      = value
Comment   = MySQL connection timeout.

Directive = opcache.revalidate_freq
Default   = 0
Type      = value
Comment   = OPCACHE revalidate frequrency (seconds)

Directive = opcache.optimization_level
Default   = 0x7FFFBFFF
Type      = value
Comment   = A bitmask that controls which optimisation passes are executed.

Directive = opcache.validate_timestamps
Default   = On
Type      = bool
Comment   = Avoid Unnecessary Filesystem Calls By Disabling Timestamp Validation

Directive = post_max_size
Default   = 64M
Type      = list
Range     = 2M,4M,8M,16M,32M,64M,128M
Comment   = The maximum size in bytes of data that can be posted with the POST method. Typically, should be larger than upload_max_filesize and smaller than memory_limit. Use shortcuts for byte values: K (kilo), M (mega), and G (giga). For example, 16M.

Directive = max_file_uploads
Default   = 20
Type      = value
Comment   = The maximum number of files allowed to be uploaded simultaneously. Starting with PHP 5.3.4, upload fields left blank on submission do not count towards this limit.

Directive = open_basedir
Type      = value
Comment   = The list of directories used to limit the files that can be opened by PHP. If the file is outside the specified directories, PHP scripts will refuse to open it. To separate directories, use a colon. For example: /dir/upload:/usr/tmp

Directive = output_buffering
Default   = On
Type      = bool
Comment   = Control the output buffering

Directive = register_globals
Default   = Off
Type      = bool
Remark    = <5.4.0
Comment   = Tells whether to register the contents of the EGPCS (Environment, GET, POST, Cookie, Server) variables as global variables. When on, register_globals will inject your scripts with all sorts of variables, like request variables from HTML forms. This option is a great security risk, thus do not turn it on without necessity

Directive = register_argc_argv
Default   = Off
Type      = bool
Remark    = <5.4.0
Comment   = Tells whether to register the contents of the EGPCS (Environment, GET, POST, Cookie, Server) variables as global variables. When on, register_globals will inject your scripts with all sorts of variables, like request variables from HTML forms. This option is a great security risk, thus do not turn it on without necessity

Directive = register_long_arrays
Default   = Off
Type      = bool
Remark    = <5.4.0
Comment   = Tells whether to register the contents of the EGPCS (Environment, GET, POST, Cookie, Server) variables as global variables. When on, register_globals will inject your scripts with all sorts of variables, like request variables from HTML forms. This option is a great security risk, thus do not turn it on without necessity

Directive = safe_mode
Default   = Off
Type      = bool
Remark    = <5.4.0
Comment   = Enables PHP safe mode. This mode puts a number of restrictions on scripts (say, access to file system) mainly for security reasons.

Directive = safe_mode_exec_dir
Type      = value
Remark    = <5.4.0
Comment   = If PHP is in the safe mode, scripts can execute external programs located only in this directory. For example: /dir/external

Directive = safe_mode_include_dir
Type      = value
Remark    = <5.4.0
Comment   = If PHP is in the safe mode and a script tries to access some files, files from this directory will bypass security (UID/GID) checks. The directory must also be in include_path. For example: /dir/inc

Directive = session.save_path
Default   = /tmp
Type      = value
Comment   = The directory where PHP writes session data (files). For example: /dir/tmp

Directive = short_open_tag
Default   = On
Type      = bool
Comment   = Allows the short form of the PHP open tag.

Directive = upload_max_filesize
Default   = 64M
Type      = list
Range     = 2M,4M,8M,16M,32M,64M,128M,256M,512M,1G
Comment   = The maximum size in bytes of an uploaded file. Use shortcuts for byte values: K (kilo), M (mega), and G (giga). For example, 128M.

Directive = mbstring.func_overload
Default   = 0
Type      = value
Comment   = Overload(replace) single byte functions by mbstring functions

Directive = mbstring.internal_encoding
Default   = 
Type      = value
Comment   = Internal script encoding. Some encoding cannot work as internal encoding (e.g. SJIS, BIG5, ISO-2022-*)

Directive = max_input_vars
Default   = 1000
Type      = value
Comment   = How many input variables may be accepted

Directive = suhosin.post.max_vars
Default   = 1000
Type      = value
Comment   = Defines the maximum number of variables that may be registered through a POST request.

Directive = suhosin.request.max_vars
Default   = 1000
Type      = value
Comment   = Defines the maximum number of variables that may be registered through the COOKIE, the URL or through a POST request. This setting is also an upper limit for the variable origin specific configuration directives.

Directive = suhosin.get.max_value_length
Default   = 512
Type      = value 
Comment   = Defines the maximum length of a variable that is registered through the URL.

Directive = suhosin.request.max_varname_length
Default   = 64
Type      = value 
Comment   = Defines the maximum name length (excluding possible array indicies) of variables that may be registered through the COOKIE, the URL or through a POST request. This setting is also an upper limit for the variable origin specific configuration directives.

Directive = suhosin.upload.max_uploads
Default   = 25
Type      = value
Comment   = Defines the maximum number of files that may be uploaded with one request.

Directive = suhosin.executor.include.whitelist
Default   = phar
Type      = value
Comment   = Defines executor whitelist.