Increase PHP security with PHPSecInfo


Browse by products and services

  • Applies to: Grid
    • Difficulty: Easy
    • Time Needed: 10
    • Tools Required: FTP client
  • Applies to: All DV
    • Difficulty: Easy
    • Time Needed: 10
    • Tools Required: FTP client

Overview

PHPSecInfo provides the security equivalent of the phpinfo() function. It is not a replacement for secure development techniques, and will not modify your code or environment.

Instructions

If you would like to install this application, follow the steps below.

  1. Download PHPSecInfo from http://phpsec.org/projects/phpsecinfo/
  2. Extract the files and folders from the zip file you just downloaded.
  3. Rename the extracted folder to phpsecinfo.
  4. Upload the renamed folder to the root directory for your domain using SFTP/FTPusing SFTP/FTP. The path should look be similar to the following:

    /home/00000/domains/example.com/html/phpsecinfo

    /var/www/vhosts/example.com/httpdocs/phpsecinfo

    NOTE:

    Be sure to replace 00000 with your site number, and replace example.com with your domain name.

  5. Now, simply open your browser and browse to http://example.com/phpsecinfo. Figure 1 is for the Grid using the default php.ini file:


    Figure 1: A sample output.

Resources