Release Stable with patched ckeditor

[marrco]

I usually have a global php-security.ini where i disable a few functions on the server (some guidelines are here: http://phpsec.org/projects/phpsecinfo/tests/) and then a per-site config file where i set open_basedir and specific allow/disallow.

Some hosts allow users to modify php.ini via .htaccess or other apache config files. I can't tell about your host php security settings.