PHP config

ewiki relies upon various settings of the PHP interpreter, which either
can be changed with entries in the php.ini or via option settings from
within .htaccess (only if you have Apache with libphp running).

A .htaccess option setting looks like:

  php_option register_globals off

while in the "php.ini" you would just write:

  register_globals = off



The recommended settings are:

  magic_slashes_gpc = off       ; This was enabled for old PHP versions
                                ; to help newbies writing more secure
         ; scripts in regards to database access (makes you wonder, which
         ; newbie actually could deal with databases). Nowadays this setting
         ; is still enabled by some providers, which try to keep their buggy
         ; site running.
         ; As a workaround (SlowSlowSlow+, and not WikiWiki+!) you can use
         ; fragments/strip_wonderful_slashes.php

  magic_quotes_runtime = off    ; This is even more awful than the above,
                                ; and if you cannot disable it, then you
         ; should not run ewiki on your Webserver. It is not believed to
         ; work correctly with that setting.

  register_globals = off        ; This setting is a security risk, if kept
                                ; enabled, because ewiki was written on a
         ; system where it is disabled (like with all newer PHP versions).
         ; It once was a very convinient setting, but the PHP language has
         ; long lost its sinmplicity and ease.

  register_argc_argv = on       ; is important for 'ewikictl' & Co.

  safe_mode = off               ; The so called 'Safe Mode' was introduced
                                ; for mass hosters, which didn't want to
         ; deal with security guidelines and needed an easy way to "secure"
         ; their servers. This setting cripples various PHP functions, and
         ; thus will disallow to use multiple ewiki extensions. The Safe
         ; Mode renders it completely useless and stupid to run a webserver
         ; on the Unix/Linux plattform, because its strenght was to invoke
         ; the various fast utilities and filters through pipes. And the
         ; lack of this opportunity then disables many ewiki extensions.

  allow_url_fopen = on          ; You will need these, if you want ewiki
  file_uploads = on             ; to deal with image caching and file
                                ; uploads (of course).

  error_reporting = ...         ; You should preferrably have this disabled,
                                ; even if ewiki.php already carries an
         ; error_reporting() call to do exactly that.
         ; The ewiki code is clean, but no longer cares about PHP "Notices"
         ; and sometimes also "Warnings" that much.

  cgi.force_redirect = 0        ; This is a stupid PHP option, that is only
                                ; there to fix a "/cgi-bin/ install" of PHP.

  cgi.fix_pathinfo = 0          ; PHP scrambles the PATH_INFO if you keep
                                ; this enabled. However Apache 1.3 often
         ; returns a broken value, so this may not matter to you anyhow.

  cgi.rfc2616_headers = ...     ; If you don't have Apache 1.3 running
                                ; (any earlier versions would do, and laters
         ; will be fixed again), then you should enable this; though ewiki
         ; does not rely on it.

  short_open_tag = ...          ; ewiki does NOT care

  output_buffering = ...        ; ewiki does NOT care

prev << "Apache config"
next >> "error numbers"

---

You cannot modify the README file, but anyhow any ideas or suggestion should as usually get filed on BugReports, UserSuggestions or even better the README.Discussion.