Urgent: Security Issue with PHP.ini Directive

Where do you see this as being enabled? This has always been off, as far as I’m aware (with the most recent response from 9 days ago here):