Merge branch 'PHP-7.2' into PHP-7.3

* PHP-7.2:
  SQLite3: add DEFENSIVE config for SQLite >= 3.26.0 as a mitigation strategy against potential security flaws

diff --cc NEWS
Simple merge

diff --cc ext/sqlite3/php_sqlite3.h
Simple merge

diff --cc ext/sqlite3/sqlite3.c
Simple merge

diff --cc php.ini-development
index 1cf2a41bf8978428494c8e2b62b108f97e1793d2,b8141af0766032fc2c309e40911b681cf67e0c82..e475e379eac445f4d13b40dda9415ddf3b8d02fb
--- 1/php.ini-development
--- 2/php.ini-development
+++ b/php.ini-development
@@@ -1004,10 -986,21 +1004,21 @@@ cli_server.color = O
  ;intl.use_exceptions = 0
  
  [sqlite3]
+ ; Directory pointing to SQLite3 extensions
+ ; http://php.net/sqlite3.extension-dir
  ;sqlite3.extension_dir =
  
+ ; SQLite defensive mode flag (only available from SQLite 3.26+)
+ ; When the defensive flag is enabled, language features that allow ordinary
+ ; SQL to deliberately corrupt the database file are disabled. This forbids
+ ; writing directly to the schema, shadow tables (eg. FTS data tables), or
+ ; the sqlite_dbpage virtual table.
+ ; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html
+ ; (for older SQLite versions, this flag has no use)
+ sqlite3.defensive = 1
+ 
  [Pcre]
 -;PCRE library backtracking limit.
 +; PCRE library backtracking limit.
  ; http://php.net/pcre.backtrack-limit
  ;pcre.backtrack_limit=100000
  

diff --cc php.ini-production
index fa09ade7866a9a3eefdefdcead41543a2b924c9a,1dbbfc8d76e0d1fc6871b3839e8bf6ee41cf2f50..980e9a8cdab823adbbddf6e28e354cb406b54e89
--- 1/php.ini-production
--- 2/php.ini-production
+++ b/php.ini-production
@@@ -1011,10 -993,21 +1011,21 @@@ cli_server.color = O
  ;intl.use_exceptions = 0
  
  [sqlite3]
+ ; Directory pointing to SQLite3 extensions
+ ; http://php.net/sqlite3.extension-dir
  ;sqlite3.extension_dir =
  
+ ; SQLite defensive mode flag (only available from SQLite 3.26+)
+ ; When the defensive flag is enabled, language features that allow ordinary
+ ; SQL to deliberately corrupt the database file are disabled. This forbids
+ ; writing directly to the schema, shadow tables (eg. FTS data tables), or
+ ; the sqlite_dbpage virtual table.
+ ; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html
+ ; (for older SQLite versions, this flag has no use)
+ sqlite3.defensive = 1
+ 
  [Pcre]
 -;PCRE library backtracking limit.
 +; PCRE library backtracking limit.
  ; http://php.net/pcre.backtrack-limit
  ;pcre.backtrack_limit=100000