Php.ini settings pose security risk?

I checked my php.ini file using //phpinfo(); and noticed somethings 开发者_StackOverflowamong them are:-

include_path :..
open_basedir novalue

do these pose security risks?

what should they be?

The . is the current directory. The : is a delimiter.

open_basedir novalue just means its off.