; --- Character encoding --- default_charset = "UTF-8" mbstring.internal_encoding = UTF-8 mbstring.encoding_translation = Off ; --- Error handling (verbose for development) --- display_errors=1 display_startup_errors=1 error_reporting=E_ALL & ~E_DEPRECATED log_errors=1 ; --- Resource limits --- memory_limit=1G upload_max_filesize=10M post_max_size=12M ; --- Security hardening (match prod to catch issues early) --- expose_php=Off allow_url_include=Off open_basedir= disable_functions= ; --- Session hardening --- session.use_strict_mode=1 session.cookie_httponly=1 session.cookie_samesite=Lax session.use_only_cookies=1 session.use_trans_sid=0