update default config to fix CVE 2014-0185 (https://bugs.php.net/bug.php?id=67060)
Release 1.1.3