PHP php.ini file in the web public root directory ? is it safe enough
<p>I heard when you want to change the php.ini settings when you don't have access to the php.ini in the root level that you can upload a php.ini to the web-root, is this correct ?</p>

<blockquote>
  <p>Another way to customize your PHP settings is to create a file named <code>php.ini</code> and to upload it to your web server. This works in a way similar to the <code>.htaccess</code> file except you don’t have to add “php_value” at the beginning of the line</p>
</blockquote>

<p>if this correct that means anyone who type </p>

<pre><code>www.xx.com/php.ini 
</code></pre>

<p><strong>should see the settings ? isnt this a security risk ?</strong></p>
