v0.29.2

docs/PHP_FPM.md

@@ -63,6 +63,7 @@ The normal ordered `index` list handles `index.php`; there is no separate PHP-in
 
 ### Additional PHP/FastCGI options
 
+- `path_info`: default-off secure script/path splitting. When enabled, `/index.php/foo/bar` may resolve the existing `index.php` script and pass `/foo/bar` as `PATH_INFO`.
 - `pass_authorization`: forwards the inbound `Authorization` header as `HTTP_AUTHORIZATION`. Disable it when the application does not need that header.
 - `max_request_body_bytes`: streaming request-body limit enforced before/during FastCGI forwarding. `0` means no additional RustProxy-side limit. A request exceeding the configured value receives `413 Payload Too Large`.
 - `max_response_header_bytes`: maximum bytes accepted before the CGI response-header terminator. The allowed range is 4096..1048576 bytes.
@@ -137,6 +138,7 @@ RustProxy supplies a controlled CGI/FastCGI parameter set including:
 - `REQUEST_METHOD`
 - `SCRIPT_FILENAME`
 - `SCRIPT_NAME`
+- `PATH_INFO` when `path_info` is enabled and a trailing path was securely split from an existing PHP script
 - `QUERY_STRING`
 - `REQUEST_URI`
 - `DOCUMENT_ROOT`
@@ -157,7 +159,7 @@ Request headers cannot become FastCGI `PHP_VALUE` or `PHP_ADMIN_VALUE` parameter
 
 An inbound `Proxy` header is **never** translated into FastCGI `HTTP_PROXY` (httpoxy mitigation), regardless of the optional Web Service hardening switch. The **Block common attack probes** option additionally blocks high-confidence sensitive/probe paths before PHP-FPM dispatch. FastCGI output cannot control downstream `Content-Length`, transfer framing, connection headers or `Proxy-*` transport headers; RustProxy owns downstream response framing.
 
-`PATH_INFO` script/path splitting is not implemented in the current 0.25 development stage; applications should route explicitly to a real script, normally through `try_files`.
+`PATH_INFO` splitting is optional and disabled by default. When enabled, RustProxy searches for an existing configured PHP script prefix inside the document root, keeps `SCRIPT_FILENAME`/`SCRIPT_NAME` on that script, and supplies only the remaining suffix as `PATH_INFO`. `REQUEST_URI` remains the original request target.
 
 ## Response parsing
 
@@ -223,3 +225,39 @@ The implementation includes source/unit coverage for:
 - bounded endpoint/time/concurrency configuration validation.
 
 Release-host acceptance should additionally exercise a real PHP-FPM runtime over Unix socket and loopback TCP and verify ACL/auth/custom errors/headers plus H1/H2/H3 client transports.
+
+
+## Per-Web-Service PHP administrative INI overrides (0.29.2)
+
+`php.php_admin_values` is a validated operator-managed string map sent in a single
+`PHP_ADMIN_VALUE` FastCGI parameter. Example:
+
+```json
+"php": {
+  "enabled": true,
+  "path_info": true,
+  "endpoint": "unix:/run/php/php-fpm-mail.sock",
+  "php_admin_values": {
+    "open_basedir": "/var/www/webmail/:/tmp/",
+    "display_errors": "Off"
+  }
+}
+```
+
+Use separate Web Services for distinct per-location PHP settings, then assign those
+services to the corresponding Custom Locations. Each Web Service can refer to the
+same trusted PHP-FPM socket. The setting does **not** isolate worker process
+identities or file permissions. Never expose PHP-FPM FastCGI to untrusted clients.
+HTTP headers cannot supply `PHP_ADMIN_VALUE`, and `php_values` must not repeat
+an admin directive. Control characters and excessive values are rejected.
+
+Prometheus metrics use only configured Web Service IDs, never script paths,
+URLs, PHP values, or dynamic user labels. `rust_proxy_php_requests_total` and
+`rust_proxy_php_responses_total{class=...}` count responses after headers have
+been received (including proxy-generated failures); the cumulative header
+latency metric intentionally excludes streamed body time.
+
+The same snapshot also exports `rust_proxy_web_server_requests_total`,
+`rust_proxy_web_server_responses_total{class=...}` and
+`rust_proxy_web_server_response_header_duration_microseconds_total` for all
+Web Server requests (PHP and non-PHP).