phpinfo() the right way!
This is how to secure any file that calls phpinfo() function. If the developer passes a get parameter to the script with a correct value he will see the server environment information, otherwise respond with a 404 error not found.
<?php
if(isset($_GET['phpinfo']) && $_GET['phpinfo'] == 'true'){
    phpinfo();
}else{
    header("HTTP/1.0 404 Not Found");
}Written by Alex Goretoy
Related protips
2 Responses
 
Interesting idea, but it might be a bit safer to lock it down based on IP or hostname rather than a simple flag.
Or better still - only allow the script to be run on localhost.
Or better...don't have the script on your public facing server at all!
over 1 year ago
·
 
Very good points and nice elaboration, thanks
over 1 year ago
·
Have a fresh tip? Share with Coderwall community!
Post
Post a tip
Best
 #Php 
Authors
Sponsored by #native_company# — Learn More
#native_title#
#native_desc#
 
 
 
 
