What ini_set options in php do you recommend using to simplify work and increase site security?

Question

PHP

I found some useful settings for myself.
Which ones do you recommend?

<?php
ini_set('display_errors', 1); // отображение ошибок - удобно при разработке
ini_set('error_reporting', E_ALL); // отображение всех ошибок - удобно при разработке
ini_set('session.use_only_cookies', 1); // запрет передачи куки в url 
?>

Answer 1

Start with documentation: php.net/manual/ru/security.php. it goes into great detail on what to pay attention to when paying attention to security in PHP, not just about ini_set(). There and XSS, and SQL Injection, and session highjacking and everything.

Answer 2

Answer 3

ini_set('display_errors', 1);

Like exactly the opposite effect.