Topic: Documentation error
I was quite confused by this part in Section 3.4:
When $config["deny_attribute"] is not set, or set to 0, or empty (""), all the 111 attributes are permitted. Otherwise, $config["deny_attribute"] can be set as a list of comma-separated names of the permitted attributes.
This would make a lot more sense -- and correctly conforms with the script's behavior -- if this is changed to say it can be set as a list of attributes that are not permitted.
Thanks for the handy script, by the way.