Is there any intention behind enabling the mail.add_x_header
configuration directive in php.ini-production?
http://lxr.php.net/opengrok/xref/PHP_TRUNK/php.ini-production#1018
This setting exposes (sort of) sensitive information about application
deployments to third parties while IMO having no apparent advantage for
production environments. The trivial patch to revert this behavior is
attached in case you agree with me.
- Martin
Personally I would want to have an audit log of emails on production. That actually is probably more important to me than non-production environments :)
Is there any intention behind enabling the mail.add_x_header
configuration directive in php.ini-production?http://lxr.php.net/opengrok/xref/PHP_TRUNK/php.ini-production#1018
This setting exposes (sort of) sensitive information about application
deployments to third parties while IMO having no apparent advantage for
production environments. The trivial patch to revert this behavior is
attached in case you agree with me.
- Martin
<php.ini-production.patch