; --- Character encoding ---
default_charset = "UTF-8"
mbstring.internal_encoding = UTF-8
mbstring.encoding_translation = Off

; --- Error handling ---
display_errors=0
display_startup_errors=0
error_reporting=E_ALL & ~E_DEPRECATED & ~E_STRICT
log_errors=1
error_log=/tmp/php_errors.log

; --- Resource limits ---
memory_limit=256M
upload_max_filesize=10M
post_max_size=12M

; --- Security hardening ---
expose_php=Off
allow_url_include=Off
; open_basedir disabled — causes false-positive E_WARNING on is_file() for valid paths under /var/www
disable_functions=exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source

; --- Session hardening ---
session.use_strict_mode=1
session.cookie_httponly=1
session.cookie_secure=1
session.cookie_samesite=Lax
session.use_only_cookies=1
session.use_trans_sid=0