diff --git a/reference/curl/functions/curl-setopt.xml b/reference/curl/functions/curl-setopt.xml
index ed68d727f5..44e94c4424 100644
--- a/reference/curl/functions/curl-setopt.xml
+++ b/reference/curl/functions/curl-setopt.xml
@@ -366,6 +366,20 @@
            <entry valign="top">
            </entry>
           </row>
+          <row>
+           <entry valign="top"><constant>CURLOPT_SAFE_UPLOAD</constant></entry>
+           <entry valign="top">
+            &true; to disable support for the <literal>@</literal> prefix for
+            uploading files in <constant>CURLOPT_POSTFIELDS</constant>, which
+            means that values starting with <literal>@</literal> can be safely
+            passed as fields. <classname>CURLFile</classname> may be used for
+            uploads instead.
+           </entry>
+           <entry valign="top">
+            &false; by default at present, but this is likely to be changed in a
+            future version of PHP.
+           </entry>
+          </row>
           <row>
            <entry valign="top"><constant>CURLOPT_SSL_VERIFYPEER</constant></entry>
            <entry valign="top">
@@ -999,7 +1013,10 @@
             </simpara>
             <simpara>
              As of PHP 5.5.0, the <literal>@</literal> prefix is deprecated and
-             files can be sent using <classname>CURLFile</classname>.
+             files can be sent using <classname>CURLFile</classname>. The 
+             <literal>@</literal> prefix can be disabled for safe passing of
+             values beginning with <literal>@</literal> by setting the 
+             <constant>CURLOPT_SAFE_UPLOAD</constant> option to &true;.
             </simpara>
            </entry>
            <entry valign="top">