Bug #73313 [Com]: over fpm does not respect in .user.ini engine off directive

Edit report at https://bugs.php.net/bug.php?id=73313&edit=1 ID: 73313 Comment by: pb at webjoker dot net Reported by: vladimir at helesic dot cz Summary: over fpm does not respect in .user.ini engine off directive Status: Wont fix Type: Bug Package: FPM related Operating System: all PHP Version: Irrelevant Assigned To: bukka Block user comment: N Private report: N New Comment: Sorry for rambling, just saying that engine = Off seems like a neat security feature and it sucks that it does not work everywhere. OTOH, it will be bad when people assume that it works everywhere and rely on it exclusively, because even if I convinced you to add it, at least in old versions it would not work. Previous Comments: ------------------------------------------------------------------------ [2021-12-19 00:06:36] pb at webjoker dot net "It doesn't really make any sense for FPM because it doesn't have any use without engine..." Hm, interesting. I want to create a little WordPress plugin that generates .user.ini files with memory_limit and I want to use it to add engine = Off to upload directories (e.g. contact form uploads). It is a shame that this does not (always) work, and when using nginx there is no way to do it unless I have access to the nginx configuration (not always the case). ------------------------------------------------------------------------ [2021-12-02 22:54:18] bukka@php.net This is only Apache configuration - see https://www.php.net/manual/en/apache.configuration.php#ini.engine It doesn't really make any sense for FPM because it doesn't have any use without engine... ------------------------------------------------------------------------ [2016-10-13 12:00:41] vladimir at helesic dot cz Description: ------------ Over fpm isn't way to disable php over engine Off as over mod_php(php_flag engine Off in .htaccess). When you put engine=Off to .user.ini it's silently ignored. I think thats mistake. There is no way to effectively enable / disable php engine per directory as where you use mod_php over apache. it's will be useful for all peoples. Test script: --------------- put to .user.ini line engine=Off Expected result: ---------------- where disable engine to Off in ini user file(per dir), it should not interpret php code. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=73313&edit=1