Log in

View Full Version : risk to display phpinfo() ?



chrbar
03-31-2008, 11:13 PM
Hi,

Is there some risk to display or to give URL to PHPINFO data in this forum or in a forum in general?

I speak about these informations:
<?php
phpinfo();
phpinfo(INFO_MODULES);
?>

I try to install a script but I've a lot of error and I need some help... I think it will be easier to help me with the PHPINFO data!
Can I give these information in a forum?

Thanks,
Chris

thetestingsite
03-31-2008, 11:15 PM
Personally I do not feel that there is any security risk of showing a phpinfo file; but I'm not 100% sure. For the most part, the only information you can really get from the phpinfo is what modules are loaded, some path information, what OS the server is running, and some other non-important info. In any case, post the code that you need help with and I'm sure we could figure it out with or without the phpinfo.

Hope this helps.