自定义php.ini文件被认为是坏的，为什么？ 在root或root的子文件夹中使用自定义php.ini文件时会出现什么问题？

Question

I have researched on php.ini files and finally got that custom php.ini files that are placed inside the directories when one need, are problematic and can make unexpected errors. Can anyone tell why custom php.ini files are not good to use on the server ?

Answer 1

Not so bad to use customized php.ini files. Of course, it is true that some major problems and security issues may be created in this case, but if you leave the sensitive sections as default, there won't be any security problems at all. Also, you can improve the security of a web application by editing the php.ini customs. For example, you can set the http_only flag on default php sessions.