add imap.enable_insecure_rsh in php.ini

1 files changed, 7 insertions, 0 deletions

diff --git a/php.ini b/php.ini
index 821b31e..3c6e49b 100644
--- a/php.ini
+++ b/php.ini
@@ -955,6 +955,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error