Matomo Security

Trying to enable force_redirect and open_basedir but I cannot seem to figure out how. I know I will have to edit our PHP config and I know where the file is, but how do I enable these?