The comma separated PHP function names for the Auto-Update feature (see Field Setup)

You can add your own functions by putting your functions in the server side Global Code section (see Server Events and Client Scripts) and then add your function name here. The function name must follow the standard rules for naming variables in PHP.

The comma separated function names for the Validate feature (see Field Setup)

You can add your own PHP/JavaScript functions for custom server/client-side validation. The function name is used for both PHP and JavaScript, so it must be a valid function name for both languages. You can put your server-side and client-side validation function in the Global Code (see Server Events and Client Scripts) section of server-side and client-side respectively.

The port to be used by PHP built-in web server. For use with Browse after generation and PHP as Testing web server, read Generate Settings.

PHPMaker will try to find a free port automatically. If you want to specific one explicitly, enter it here.

Project name. See Project File for more info.

Unique ID of the project. Do not change the project ID unless absolutely necessary. See Project File for more info.

Memory limit of Node.js (MB). If your project is large, you may need to increase the memory limit, e.g. you can set it to 2048, 3072, 4096, etc.

Compress the project stylesheet (i.e. <project>.css) and output minified .css file.

Compress the project JavaScript file (i.e. ewp<version>.js) and output minified .js file.

Do not generate the the project stylesheet.

Specify the encoding for Ajax/iconv

Some features such as Ajax require conversion between your encoding and utf-8. If you use non English languages, you may need to set character encoding for these features. By default PHPMaker will setup the encoding automatically based on your project's Charset setting. If that is incorrect, you can specify yours. Make sure either iconv functions or multibyte string functions are enabled and your encoding is supported. See PHP manual for details.

The encoding of the file system of the server.

When saving a file to the server, the file name need to be converted to the file system encoding. If your project charset/encoding is different from the file system encoding and you accepts non alphanumeric file names, enter the file system encoding of the server

Specify the charset for MySQL SET NAMES statement.

If actual charset encoding of your data is different from the charset of your project, you may need to specify this setting for MySQL to convert between them. Read http://dev.mysql.com/doc/refman/5.0/en/charset-connection.html before using this setting.

Specify the database time zone for MySQL/PostgreSQL/Oracle.

Specify this setting if you want to specify a time zone for your database(s).

Use JavaScript popup message to display messages of the application.

By default the messages are displayed above the main table. This options uses JavaScript to show the message as a popup message on page load.

Disable submit buttons when submitting the form.

Enable this setting if you need to prevent user submitting the form more than once (by clicking the submit button) when the browser is submitting the form.

Allow passing username and password to the login page as URL parameters.

By default the login page accepts HTTP POST only. If this setting is enabled, it accepts HTTP GET also, then user can login by URL , e.g.

login.php?username=xxx&password=yyy (where "yyy" is a plain text password)

For example, this allows user login by using PHP cURL from your own scripts.

For example, this allows login by your own scripts.

For security, you should pass encrypted username and password whenever possible. You can decrypt them with your code by User_CustomValidate server event before validation, see Server Events and Client Scripts.

Allow passing username and password to the login page via session variables.

By default the login page accepts HTTP POST only. If this setting is enabled, it accepts session variables also, then user can auto-login by setting some session variables , e.g.

$_SESSION[PROJECT_NAME . "_Username"] = "xxx"; // where EW_PROJECT_NAME is the constant of your project name (see above) and "xxx" is user name
$_SESSION[PROJECT_NAME . "_Password"] = "yyy"; // where "yyy" is a plain text password

Specify if sensitive keywords allowing XSS attack should be removed.

If enabled, all user input string will be checked against an array of sensitive keywords. If discovered, those keywords will be removed to prevent XSS attack. If this behavior is unwanted, you can disable this feature at your own risk. Re-generate and re-upload the ewcfg*.php after changing this setting.

XSS removal is done by HTML Purifier with default configuration, if you just want to customize the configuration, you can use server side Global Code (see Server Events and Client Scripts) to modify the global variable $PurifierConfig which is used to create instance of HTMLPurifier, e.g.

$PurifierConfig = HTMLPurifier_Config::createDefault();
$PurifierConfig->set('Filter', 'ExtractStyleBlocks', true);

Read HTML Purifier configuration documentation for details.

Check synchronizer token for forms with method="post".

Synchronizer token is used to prevent Cross-Site Request Forgery (CSRF). If you add your own HTML forms with method="post", you should add the token to your form by a hidden tag, e.g.

<input type="hidden" name="token" value="<?php echo CurrentPage()->Token ?>">

If you post your form by JavaScript, e.g. by jQuery.post(), you should also add the token to the data, the JavaScript variable of the token is ANTIFORGERY_TOKEN.

Specify the session time-out period if the user does not refresh or request a page.

PHP has its own settings for session timeout, you can configure them in php.ini, read http://php.net/manual/en/session.configuration.php, but sometimes you may want to control the session period yourself, then you can setup BOTH this setting and the Session keep alive interval (seconds) setting (see below) to a positive value.

Specify the interval to send Ajax request to the server for keeping the session alive.

Specify the countdown period before session ends.

When the session is about to end, a modal dialog will show up to remind user and let the user choose to continue the session. If the user does not respond after the countdown period, the session will expire.

The separator between key values of a composite key. Default is ",".

If your primary key values are of string type and contain commas also, the commas will affect parsing of the composite key value in the script and lead to failure of locating a record, you can change the separator to avoid such problem.

Use formatted XML during export.

By default DOM XML does not output formatted XML (no line breaks and indent between tags), enable this setting to override it.

Specify if master record should be exported during exporting master/detail records. (Not applicable to CSV) Default is true.

Specify if master record should be exported during exporting master/detail records to CSV. Default is false.

If master record is exported, the result CSV may not be imported into other application. If you want to export it anyway, enable this setting.

Specify if detail records in View page of master table (in Master/Detail-View) should be exported. Default is true.

Specify if detail records in View page of master table (in Master/Detail-View) should be exported for CSV. Default is false.

Specify if master record in List page of detail table should be displayed in vertical format. Default is true.

Allow no paging section in List page.

If both paging section at top and that at bottom are disabled, users will not be able to go to the second or later pages of the recordset. The scripts will use paging section at bottom by default to make sure paging is possible. If you want to allow no paging section (e.g. you always have all records in one page), enable this setting.

If only one page (i.e. number of records <= page size), hide the paging section automatically.

If only one page (i.e. number of records <= current page size), hide the page size selector section automatically.

For used with User ID Security. (see Security Settings.)

If enabled, a parent user can view records of child users and grandchild users and so on. If disabled, a parent user can only view records of child users.

For used Master/Detail with User ID Security (see Security Settings) . Default is False.

If master table is protected by User ID Security, the detail tables "inherit" the security even they have not the User ID field. This is achieved by checking the master records that the user can access with User ID Security, then limit the detail records to those belonged to the accessible master records. The checking can be done by using subquery but not all databases support subquery, you may want to disable this setting in such cases. On the other hand, if you have large number of detail records and not using subquery makes the SQL too long for your database, then enable this setting if your database supports subquery.

Specify if the search panel should be initialized as collapse on page load

For use with Check Conflicts (see Table Setup). Specify the number of bytes for calculating the hash value . Default is 200.

Check Conflicts will increase the time required to load the page, for better performance only the first hundreds of bytes of the BLOB fields are processed by default, but there are chances that change of BLOB data is not detected (if the first nth bytes are not changed). You can increase the number of bytes, if you want to process all bytes, enter 0.

Specify if the permissions for List, View, and Search are different. Default is true. Note: For use with Dynamic User Levels (see Security Settings) only.

If disabled, the permissions for List/View/Search are the same. That is, if the List page is accessible by an user, then the View page and Advanced Search page are also accessible by the user.

For setting Oracle's NLS_COMP parameter. Requires Oracle 10gR2 (or later). Possible values are: BINARY, LINGUISTIC, ANSI.

For example, if you want to do case insensitive search you can select LINGUISTIC.

For setting Oracle's NLS_SORT parameter. Requires Oracle 10gR2 (or later).

For example, if you want to do case insensitive search you can enter "BINARY_CI" (no double quotes).

Specify if Auto-Suggest should consider Display field #2 to #4.

By default Auto-Suggest only uses Display field #1 and only finds records with Display field #1 STARTS WITH the input characters. It this setting is enabled, Auto-Suggest finds records with Display field #1 to #4 CONTAINS the input characters

For use with Auto-Fill (see Field Setup). By default the looked-up value (if any) will be used to fill the target field, enable this option to use the original (database) value instead.

Specify the initial number of blank rows in Grid-Add and Master/Detail-Add mode. Default is 5.

To keep the original precision of a decimal number, by default all decimal digits as outputted by the database will be used in Edit page. For example, if a number is 1.23456 in database, the Edit page will also show 1.23456 even you may have specified just 2 decimal digits in View Tag panel (see Field Setup). If you want to show the number as in the View page, you can enable this setting. However, note that after saving the record, the number will be saved as 1.23 only even you have not edited the field value.

If enabled, fields with Date/Time named format (see Field Setup) set to settings with time will be displayed without the seconds part.

For use with Dynamic Selection List. Specify the separator for multiple selected values. Default is ",".

If enabled, lookup data will be cached in memory so all subsequent calls to lookup will use the cache data instead of database access.

The maximum number of records for lookup cache. Used in conjunction with Use lookup cache. If the total number of records in a lookup is more than this value, lookup data will not be cached.

Specify if the jQuery Migrate plugin should be used in the project. This plugin can be used to warn about and/or restore APIs and behaviors that have been deprecated and/or removed as of jQuery version 3.0.

Specify if an uploaded file should be copied when copying a record with file upload fields. (For use with file upload to folder.) Default is false.

If the option Delete file on update/delete (see PHP settings) is enabled, the uploaded file will be deleted. If the deleted record is a copied record, deleting the uploaded files will affect the original record. To prevent such possible problem, enable this setting to duplicate the uploaded file when copying a record.

Specify the file upload separator used to separate the file names. By default, comma is used. If you allow file names with comma, you can enter another separator, e.g. "|".

The width of the thumbnail displayed during the upload process.

The height of the thumbnail displayed during the upload process.

Encrypt upload file path if enabled.

Specify the file upload method, either "POST" (default) or "PUT".

Specify the URL path of uploaded files. Default is empty, meaning that the path of the global or field specific upload folder will be used. However, under some rare cases, the URL path cannot be derived from the upload folder, then you can specify it explicitly.

Specify the file upload path (absolute) for temporary files. If this setting is used, the matching File upload URL path (absolute) for temporary files (see below) must also be set.

When working with file upload fields, some temporary files will be created and then deleted in a temporary folder. Default is empty, meaning that the global upload folder will be used. However, under some rare cases, you may want to specify your own. This path must be physical and it must be on accessible by the web server, e.g. /some/real/path/ or D:\some\real\path\, and is accessible by URL (see next).

Specify the file upload URL path (absolute) for temporary files, e.g. /my/virtual/path/ (root-relative URL) or //www.mycompany.com/my/virtual/path/ (protocol-relative URL). If File upload path (absolute) for temporary files (see above) is used, this setting must also be set so that the temporary files can be accessed by URL.

For use with image resize.

If a target resize width is <= 0, this default width will be used. If this setting is also 0, the width will be auto-adjusted to keep the aspect ratio.

For use with image resize.

If a target height width is <= 0, this default height will be used. If this setting is also 0, the height will be auto-adjusted to keep the aspect ratio.

Keep aspect ratio during image resize.

File extensions that will be treated as images for download. Comma separated.

File extensions that will be treated as non-image download files. Comma separated.

For use with "All words"option of Quick Search, allows searching all keywords in any fields selected for Quick Search.

When searching "All words" with Quick Search (see Table Setup), by default all keywords must be found in the same field. This option provides an alternative searching behavior.

Option for searching fields that store multiple values as comma separated string.

Valid values are: (Default is 3)
1 - no multiple value, the whole comma separated string is considered as one string
2 - all multiple values must meet the search criteria (AND condition)
3 - either one of the multiple values must meet the search criteria (OR condition)

Specify where to save the search filters. Possible values are: Server, Client, None. Default is Client, i.e. save by browser's localStorage.

Replace textarea by textbox in Search page and Extended Search. Default is TRUE.

Minimum password strength if check password strength is enabled.

Password length when generating a random password.

For used with Hashed password (previously MD5 password), see Security Settings. If this setting is enabled, PHP password_hash function will be used to create password hash. By default CRYPT_BLOWFISH algorithm will be used. If this setting is disabled, the old md5 function will be used.

If enabled, the administrator and database user name and password stored in the config file will be encrypted by php-encryption.

Encryption key used by php-encryption.

Add plain text version when sending HTML email.

Specify the mailer used in PHPMailer when sending emails. Default is "smtp".

For use with Export (Email). (see PHP Settings.) Default is 3.

To avoid abusing the export to email feature, the number of email addresses in the recipient field is limited to the specified value.

For use with Export (Email). (see PHP Settings.) Default is 3.

To avoid abusing the export to email feature, the number of emails can be sent by the user in each session is limited to the specified value.

Use user id value for audit trail if User ID Security is enabled.

Use responsive layout for mobile devices automatically. Default is TRUE.

Specify the left column CSS class for all forms. Possible values are: col-sm-2, col-sm-3, or col-sm-4. Default is col-sm-2.

This CSS class controls the width of the left column.

Specify the CSS class for multi-column List page. Possible values are: col-sm, col-md, or col-lg. Default is col-sm.

By default Bootstrap horizontal form is used in Add/Edit/Search/Update/Registration pages, this option makes the scripts use Bootstrap table instead.

Use button dropdown instead of button group to save more spaces for data in mobile mode. Default is TRUE.

Add placeholder attribute to form elements automatically. Possible values are:

• None - no placeholder
• Caption - use field caption (see Field Setup) as placeholder attribute value (default)
• Title - use field title (see Field Setup) as placeholder attribute value

For AdminLTE. Specify whether to adjust heights of HTML elements. Default is true.

Specify the page title style. Possible values are:

• None - no page title (with Breadcrumbs)
• Caption - table caption (without Breadcrumbs)
• Breadcrumbs - table caption (with Breadcrumbs) (default)
• Title - site title (with Breadcrumbs)

Authentication mode: Possible values are: Windows, LDAP. If not specified, no authentication.

PHP array of options, for use with ldap_set_option, e.g. [LDAP_OPT_XXX => "xxx"]. By default the following options are already set:

[LDAP_OPT_PROTOCOL_VERSION => 3, LDAP_OPT_REFERRALS => 0]

Enable Google Sign-In. Requires both Google client ID and Google client secret. To create client id and secret, read Creating a Google API Console project and client ID.

• Ymd
• mdY
• dmY
• YmdHis
• mdYHis
• dmYHis
• ymd
• mdy
• dmy
• ymdHis
• mdyHis
• dmyHis

where:

• Y - A full numeric representation of a year, 4 digits
• y - A two digit representation of a year
• m - Numeric representation of a month, with leading zeros, 01 through 12
• d - Day of the month, 2 digits with leading zeros, 01 to 31
• H - 24-hour format of an hour with leading zeros, 00 through 23
• i - Minutes with leading zeros, 00 to 59
• s - Seconds, with leading zeros, 00 through 59

Time zone, see List of Supported Timezones. Default is unspecified.

If not specified, the default "GMT" will be used.

Absolute URL(s), e.g.

https://host/path/xxx.js (absolute remote URL with protocol)
//host/path/xxx.js (absolute remote URL without protocol)
/path/xxx.js (absolute local URL)
//host/path/xxx.js|//host2/path2/yyy.js (more than one paths)

Relative URL(s) (relative to the destination folder), e.g.

plugins/colorpicker/bootstrap-colorpicker.min.js

Absolute physical paths, e.g.

D:\path\xxx.js

PHPMaker will bundle these physical scripts as one script (<project>_bundle.js) and output to the "phpjs" folder. This is the least recommended way of specifying the path.