From 2026bba3354c17c14bb187707cae8f4df7f53624 Mon Sep 17 00:00:00 2001
From: Xinchen Hui <laruence@php.net>
Date: Thu, 8 Nov 2012 06:08:51 +0000
Subject: [PATCH] add doc for setting PHP configuration options through
 webserver config

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@328281 c90b9560-bf6c-de11-be94-00142212c4b1
---
 install/fpm/configuration.xml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/install/fpm/configuration.xml b/install/fpm/configuration.xml
index 5f380e7735..876a2a5a06 100644
--- a/install/fpm/configuration.xml
+++ b/install/fpm/configuration.xml
@@ -480,6 +480,30 @@
      Settings defined with <literal>php_admin_value</literal> and <literal>php_admin_flag</literal>
      cannot be overriden with <function>ini_set</function>.
     </para>
+    <para>
+     As of 5.3.3, PHP settings are also possible to be set in webserver.
+     <example>
+      <title>set PHP settings in nginx.conf</title>
+      <programlisting role="ini">
+       <![CDATA[
+set $php_value "pcre.backtrack_limit=424242";
+set $php_value "$php_value \n pcre.recursion_limit=99999";
+fastcgi_param  PHP_VALUE $php_value;
+
+fastcgi_param  PHP_ADMIN_VALUE "open_basedir=/var/www/htdocs";
+       ]]>
+      </programlisting>
+     </example>
+     <caution>
+      <para>
+       Because these settings are passed to php-fpm as fastcgi headers,
+       php-fpm should not be bound to a worldwide accessible address.
+       Otherwise, anyone could alter the PHP configuration options.
+       See also 
+       <link linkend="listen-allowed-clients">listen.allowed_clients</link>.
+      </para>
+     </caution>
+    </para>
    </sect2>
    
   </sect1>