{"id":16557,"date":"2012-07-23T15:25:13","date_gmt":"2012-07-23T13:25:13","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/?p=16557"},"modified":"2012-07-23T15:25:13","modified_gmt":"2012-07-23T13:25:13","slug":"php-exposure-via-easter-egg","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2012\/07\/23\/php-exposure-via-easter-egg\/","title":{"rendered":"PHP exposure via easter egg"},"content":{"rendered":"\n

Here is an interesting easter egg in PHP. \u00a0Check if your php.ini file has expose_php setting turned on like so:<\/p>\n

\r\n; Decides whether PHP may expose the fact that it is installed\r\n; on the server (e.g. by adding its signature to the Web\r\n; server header). It is no security threat in any way, but it\r\n; makes it possible to determine whether you use PHP on your\r\n; server or not.\r\n; http:\/\/www.php.net\/manual\/en\/ini.core.php#ini.expose-php\r\nexpose_php = On\r\n<\/pre>\n
If it’s on, then you can see PHP Credits page, which includes PHP authors and contributors, as well as authors and contributors to the PHP modules that you have installed. To see the page add the secret parameter to any of the PHP pages on your server, like so: http:\/\/localhost\/index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000. You’ll see a long page that starts like so:<\/p>\n
\"\"<\/a><\/p>\n
Kudos to Chris<\/a> for pointing it out to me. \u00a0I’ve since disabled the setting on my server.<\/p>\n\n","protected":false},"excerpt":{"rendered":"\n
Here is an interesting easter egg in PHP. \u00a0Check if your php.ini file has expose_php setting turned on like so: ; Decides whether PHP may expose the fact that it is installed ; on the server (e.g. by adding its signature to the Web ; server header). It is no security threat in any way, … Continue reading PHP exposure via easter egg<\/span><\/a><\/p>\n\n","protected":false},"author":2,"featured_media":16558,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[1,18,133,62,1334],"tags":[3070,38,200],"keyring_services":[],"class_list":["post-16557","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","category-programming","category-sysadmin","category-technology","category-web-work","tag-easter-egg","tag-php","tag-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t