What security problems could come from exposing phpinfo() to end users?

后端 未结 6 1516
滥情空心
滥情空心 2020-12-01 10:27

If a phpinfo() dump is shown to an end user, what is the worst that a malicious user could do with that information? What fields are most unsecure? That is, if

6条回答
  •  佛祖请我去吃肉
    2020-12-01 10:43

    The biggest problem is that many versions make XSS attacks simple by printing the contents of the URL and other data used to access it.

    http://www.php-security.org/MOPB/MOPB-08-2007.html

提交回复
热议问题