Concerns about "default" PHP settings
Posted: 10. June 2007 04:56
Hi All,
I've just installed XAMPP 1.6.2 and thought I'd start a discussion on some default PHP settings that are provided in the setup.
Those are the main issues I've found with the default settings. Some are minor-ish, some are pretty major, depending on your point of view.
The worst culprit that I can see is the short_open_tags. It's unable to be turned off at the moment as it breaks the XAMPP UI, yet it's been recommended not to use it for quite a while now.
Any other opinions?
Cameron.
I've just installed XAMPP 1.6.2 and thought I'd start a discussion on some default PHP settings that are provided in the setup.
- * short_open_tag = On - This usage has been deprecated and can cause issues with XML, etc. Setting to Off breaks the XAMPP interface as someone took a shortcut & uses <?=?> etc a lot.
* register_long_arrays = On - This has been deprecated in preference for the super globals $_GET, $_POST, etc. It is recommended to disable this as it reduces memory usage.
* register_argc_argv = On - Not usually used in web-based scripts.
* magic_quotes_gpc = On - This is a kludge to "filter" data to protect from various remote data injections. A better solution is to manually filter input & escape output.
Those are the main issues I've found with the default settings. Some are minor-ish, some are pretty major, depending on your point of view.
The worst culprit that I can see is the short_open_tags. It's unable to be turned off at the moment as it breaks the XAMPP UI, yet it's been recommended not to use it for quite a while now.
Any other opinions?
Cameron.