Archive for the ‘PHP’ Category

Exposing PHP is a Security Risk

Posted on November 19, 2007, 3:05 am, by James Wilson, under PHP, Security.

In php.ini, there is this:
; Misc
;
; Decides whether PHP may expose the fact that it is installed on the server
; (e.g. by adding its signature to the Web server header). It is no security
; threat in any way, but it makes it possible to determine whether you use PHP
; on your server or not.
expose_php [...]

1 Comment | Read the rest of this entry »