The Advanced Editor

For WHM version 11.32

You should exercise extreme caution when changing any of the values as this could result in non-functioning PHP scripts. For information on configuring PHP’s core features visit http://us2.php.net/ini.core to view the documentation.

Remember to click Save when you are finished making your changes.

This is not an exhaustive list; please consult the PHP documentation above for more information.

Directive Description
extension_dir Assigns a directory for PHP extensions. These extensions are a collection of different functions that can be called when a PHP script is executed.
include_path Lists a path or paths where your PHP functions will look for files when certain functions are used. You can separate the directory paths with a colon (:) in a *nix system or a semicolon (;) in the Windows® environment. (Example: .:/example/path1:/example/path2)
file_uploads Describes whether or not HTTP file uploads are possible for your PHP scripts. Select Off to disallow file uploads or On to allow them. This feature is On by default.
asp_tags Allows PHP scripts to use ASP-like tags in addition to the usual tags. This includes the variable-value printing shorthand of <%= $value %>.
memory limit Limits the amount of memory that scripts can allocate, described in bytes. This aids in preventing poorly written scripts from using too much memory. This feature is capable of accepting the character ‘M’ to define the limit in Megabytes. (Example: 32M limits the allocation of memory to 32 Megabytes -- the default setting.)
post_max_size Specifies how much data PHP is allowed to take from post requests through Apache. A post request can ultimately be looked at as a user giving a program, in this case a PHP script, some input.In effect, this describes how much input PHP is allowed to accept from a user.
register_globals This defines whether or not the Environment, GET, Post, Cookie, and Server variables can be defined as global variables (variables accessible at every level of the application). Select Off or On. This feature is Off by default.
ALERT! Warning: This is a deprecated feature that, if enabled, can pose serious security risks for your server. Leaving this directive set to Off is highly recommended.
upload_max_filesize Defines the maximum file size for an upload in bytes. This feature is capable of accepting the character ‘M’ to define the limit in Megabytes. (Example: 2M limits the file size to 2 Megabytes — the default setting.)
upload_tmp_dir Specifies the directory for storing temporary files that have been uploaded through PHP.
display_errors Selects whether to display any errors that occur during the execution of a PHP script. Enabling this feature, while convenient, may expose you to some security risks given that valuable information about the error and your server may be exposed to an attacker that is attempting to exploit the script. In most cases this option should be left disabled; use log_errors and error_log instead.
error_log Defines the path to the error log file. You should use this log file to check errors rather than using display_errors.
*error_reporting Defines the level of error that should be recorded. See the PHP documentation for more information on error reporting levels.
log_errors Selects whether to log the errors that occur when a PHP script is executed. This is preferable to, and more secure than, display_errors.
allow_url_fopen Enables or disables the fopen() function. This function is responsible for accessing remote files. As fopen() can be a security risk, enabling this option is not recommended.
max_execution_time Defines, in seconds, the maximum amount of time a script is allowed to run before it is terminated. This prevents poorly written scripts from tying up the processing power of your server. The default value is 30 seconds.
disable_functions Allows you to disable PHP functions that have been deemed a security risk. To use this feature, simply enter the function name separated by a comma ( ,). (Example: function1(), function2()...) This feature is not affected by safe mode.
max_input_time Defines the maximum amount of time, in seconds, a script is allowed to parse input data. The default value is 60 seconds.
enable_dl Setting this to On allows users to employ the dl function in their scripts, which dynamically loads a PHP extension at runtime.
ALERT! Warning: Setting this directive to On poses security risks to your server. We recommend you turn it Off unless enabling it is absolutely necessary.
safe_mode This feature prevents users from executing PHP scripts that do not belong to them. For example, if the user cPanel1 owns example.php, a user known by another alias will not be able to execute example.php.
open_basedir Do not edit this option. The open_basedir option is configured through Apache.
safemode_includedir Defines a directory that will not be affected by safe mode. You should add your PEAR and PECL libraries to this directory.
session.save_path Defines the path where files created by PHP will be stored. If you use the default handler, this value is defaulted to /tmp.
sql.safe_mode ALERT! Warning: Do not enable this feature unless absolutely necessary. This will prevent users who do not own the database from accessing the database. The net effect will be the failure of many programs and applications, such as shopping carts or content managers, that access databases for normal operation.

Topic revision: r5 - 15 Nov 2010 - 21:49:34 - Main.JustinSchaefer
 

Copyright © cPanel 2000–2011.