Use an ini file for server configuration
Switch to an ini file to avoid any code injection from the config file.
Because all the code files will be checked against a release signature, the config file must not allow to modify the code.
By the way, merge all the config files from the core modules and the general config in one file, using sections instead of multiple files.
The default config file will be /config.ini. This path can be changed with an environment variable to avoid modification of any code file. The environment variable must be able to separate multiple instances of Pastèque on the same server. It can be PASTEQUE_CONFIG_PATH_ with id the base url.