patch - adds new setting safe_mode_hide_env_vars

If you guys could take a look at this patch, and see what you think. This allows for an ini setting that will block specified environmental variables from being seen by php scripts. It does make one update that probably should be moved, and that is in php_module_startup. Since this uses a hashtable datatype, zend_hash_init needs to be called. You guys probably don't want this in the main startup, but I figured that you could let me know where it could go best. Maybe a startup call in safe_mode.c? I know we had discussions about doing an env -i before running apache, and I do agree on cleaning the apache users environment, but there is always the possibility of env vars you can't remove. (LD_LIBRARY_PATH) . If you like the idea, but want things in different places let me know -Jason begin 666 safe-hide-env-basic_functions.c.diff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`` ` end begin 666 safe-hide-env-main.c.diff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` ` end begin 666 safe-hide-env-php_globals.h.diff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` end begin 666 safe-hide-env-php_variables.c.diff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` end