|
Posted by Michael Fesser on 09/24/07 21:01
..oO(KDawg44)
>I recently took over a site for a client and the original developer
>has a phpinfo.php page. I can see how this is interesting during
>development on a dev site, but it seems like giving a lot of
>information to the world to have it on the live site.
It's OK to have a phpinfo() page somewhere in a protected admin section
of a site. I also do that, because from time to time I need to know some
details about the PHP installation and the server's environment. But it
should not be available to the normal visitor.
>My question, am I overreacting or is this as dumb a move as I feel it
>is?
I would remove it or at least restrict the access.
Micha
Navigation:
[Reply to this message]
|