RE: [PHP-GENERAL] Re: [PHP3] phpinfo
| From: | Boaz Yahav | Date: | Sat, 17 Jun 2000 09:44:55 +0000 |
| Subject: | RE: [PHP-GENERAL] Re: [PHP3] phpinfo | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-2124@lists.php.net to get a copy of this message | ||
Obviously, no one has to know how you decide to call this file or where you
stick it :)
For all I care you can name it as a double unique dot php.
Sincerely
berber
Visit http://www.weberdev.com
The obvious choice for PHP Developers
-----Original Message-----
From: richard@zend.com [mailto:richard@zend.com]
Sent: Friday, June 16, 2000 3:25 AM
To: php-general@lists.php.net
Subject: [PHP-GENERAL] Re: [PHP3] phpinfo
In article
<C3A10D4593E6D31198500008C7E987F10137C1D9@ntx.netvision.net.il>,
berber@netvision.net.il (Boaz Yahav) wrote:
> You can have a file called phpinfo.php3 on your web server which has this
in
> it :
>
>
> <?
> phpinfo();
> ?>
Since the goal is to stop hackers, and this gives all sorts of nifty info
to a hacker (like exactly what versions of all sorts of stuff you run,
which the scriptKiddies can look up), this is not the best idea on the
planet.
The output of phpinfo() is generally unchanging, except for:
$HTTP_POST_VARS
$HTTP_GET_VARS
$HTTP_COOKIE_VARS
$HTTP_ENV_VARS (?)
any session variables (which he ain't got in PHP3)
$REMOTE_HOST/$REMOTE_ADDR
.
.
.
Long story short: Get the stuff you need one variable at a time and email
it to yourself.
--
Richard Lynch | If this was worth $$$ to you, buy a CD
US Customer Support Director | from one of the artists listed here:
Zend Technologies USA | http://www.L-I-E.com/artists.htm
http://www.zend.com | (this has nothing to do with Zend,
duh!)
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net