Php.info?

[Jade Elizabeth]

I could have sworn there was one available on the downloads page yonks ago. I can remember telling people to download it and upload it so I could help with support.


Why was it taken down?

[Vekseid]

Are you talking about a diagnostic php script or a sample php.ini file?

[kat]

This help, Lizzy?

What is phpinfo.php?

[Jade Elizabeth]

Are you talking about a diagnostic php script or a sample php.ini file?

Neither .

This help, Lizzy?

What is phpinfo.php?

Yeah I used that but I was wanting a file and can remember it from the downloads page. I might be messing myself up but I could have sworn it was there.

[Tony Reid]

I remember that - it not only had php stuff in it - but also reported on mysql.

Not sure if it was a team only script.... I cant find it anywhere at the moment Jade.

[IrateZebra]

I believe you are talking about status.php? I'll see if JB still has it on his local.

ETA: http://download.simplemachines.org/index.php?thanks;filename=status.php

[Jade Elizabeth]

I remember that - it not only had php stuff in it - but also reported on mysql.

Not sure if it was a team only script.... I cant find it anywhere at the moment Jade.

Php.info has stuff on MySQL yes but I think you're on about status.php lol.

[Thantos]

I remember that - it not only had php stuff in it - but also reported on mysql.

Not sure if it was a team only script.... I cant find it anywhere at the moment Jade.

Php.info has stuff on MySQL yes but I think you're on about status.php lol.

phpinfo is not something you want floating out in the public.

[Kindred]

edited for security....

[Jade Elizabeth]

I remember that - it not only had php stuff in it - but also reported on mysql.

Not sure if it was a team only script.... I cant find it anywhere at the moment Jade.

Php.info has stuff on MySQL yes but I think you're on about status.php lol.

phpinfo is not something you want floating out in the public.

edited for security....

Why?

[mashby]

phpinfo is not something you want floating out in the public.

[Kindred]

because the phpinfo has a lot of server information and settings listed which might allow someone with the right knowledge to take advantage of your server.

[Jade Elizabeth]

phpinfo is not something you want floating out in the public.

I was asking why about that...

because the phpinfo has a lot of server information and settings listed which might allow someone with the right knowledge to take advantage of your server.

Well then why isnt it password protected or something? Why isnt there a note in the documentation to remove it? In fact the documentation says to link to it when asking for support . I didnt think it was dangerous .

[Oya]

because it gives away a list of what modules are installed, what paths things can be found at, and in fact at one time there was a very nasty xss vulnerability in phpinfo() itself, not sure it's actually been removed yet either

[Kindred]

and that list of modules and directories is one of the reasons we ask for it for support help.... but we don't suggest that it is left there afterwards.

[Jade Elizabeth]

Okay, well thanks for explaining that cause I had no idea.