; PHP hardening for the wms-app container. expose_php = Off display_errors = Off display_startup_errors = Off log_errors = On ; Session defaults; app/session.php sets the same per request (plus Secure over HTTPS). session.use_strict_mode = 1 session.use_only_cookies = 1 session.cookie_httponly = 1 session.cookie_samesite = Lax