; --- Error handling (verbose for development) ---
display_errors=1
display_startup_errors=1
error_reporting=E_ALL
log_errors=1

; --- Resource limits ---
memory_limit=256M
upload_max_filesize=10M
post_max_size=12M

; --- Security hardening (match prod to catch issues early) ---
expose_php=Off
allow_url_include=Off
open_basedir=/var/www:/tmp
disable_functions=exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source

; --- Session hardening ---
session.use_strict_mode=1
session.cookie_httponly=1
session.cookie_samesite=Lax
session.use_only_cookies=1
session.use_trans_sid=0