New INI Configuration Directives

New php.ini directives introduced in PHP 5.2.0:

• allow_url_include

  This useful option makes it possible to differentiate between standard file operations on remote files, and the inclusion of remote files. While the former is usually desirable, the latter can be a security risk if used naively. Starting with PHP 5.2.0, you can allow remote file operations while disallowing the inclusion of remote files in local scripts. In fact, this is the default configuration.

• pcre.backtrack_limit

• pcre.recursion_limit

• session.cookie_httponly