From: Remi Collet <remi@php.net>
Date: Sat, 8 Dec 2018 09:24:36 +0000 (+0100)
Subject: add imap.enable_insecure_rsh in php.ini
X-Git-Tag: php-7.2.14RC1~14^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4288674651e18360e8e3988c528e9a8c66666ff0;p=php

add imap.enable_insecure_rsh in php.ini
---

diff --git a/php.ini-development b/php.ini-development
index 9e7094c4fb..3b8a2aff32 100644
--- a/php.ini-development
+++ b/php.ini-development
@@ -975,6 +975,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error
diff --git a/php.ini-production b/php.ini-production
index dafddedac1..d8f686e269 100644
--- a/php.ini-production
+++ b/php.ini-production
@@ -975,6 +975,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error