Recipe missing request_order
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 454
- Forks
- 480
- Avg merge
- 5h 35m
- Merged PRs (30d)
- 1
Description
Description
php.ini for CentOS, RedHat and Ubuntu are missing request_order, defaulting it to variables_order, which is set to EGPCS.
http://php.net/manual/en/ini.core.php says that
...the default distribution php.ini files does not contain the 'C' for cookies, due to security concerns.
I would like to understand why the variable is missing from the template for these distributions and, if possible, what are the potential security issues that might come from have 'C' in the list.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the php.ini templates for CentOS, RedHat, and Ubuntu and compare how request_order is defined relative to variables_order. Review the PHP ini.core documentation and the existing template behavior, then document whether request_order should be added and what security implications including cookies would have.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100