From 4288674651e18360e8e3988c528e9a8c66666ff0 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@php.net>
Date: Sat, 8 Dec 2018 10:24:36 +0100
Subject: [PATCH] add imap.enable_insecure_rsh in php.ini

---
 php.ini-development | 7 +++++++
 php.ini-production  | 7 +++++++
 2 files changed, 14 insertions(+)

diff --git a/php.ini-development b/php.ini-development
index 9e7094c4fb0..3b8a2aff32f 100644
--- a/php.ini-development
+++ b/php.ini-development
@@ -975,6 +975,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error
diff --git a/php.ini-production b/php.ini-production
index dafddedac10..d8f686e2690 100644
--- a/php.ini-production
+++ b/php.ini-production
@@ -975,6 +975,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error