Disable Dangerous Phpinfo()

Fr33B5D · 08-29-2005, 03:25 AM

Dear friends,
I am going to dedicate some parts of my hard disk to a friend of mine but I wish to know how I can disable running phpinfo() at their space.
This is important because they can extract a lot of valuable information regarding web server machine.

spooon · 08-29-2005, 03:47 AM

AFAIK phpinfo() is not "magical". All the information is normal web server environment stuff that can otherwise be easily obtained through other functions in PHP, and phpinfo() just happens to be a convenient way to display that information for debugging or whatever. Even if you could disable phpinfo(), it does not hide the underlying information in any way.

slacky · 08-29-2005, 07:29 AM

spooon is right as far as phpinfo() not revealing things you cannot get to in other ways.

However, there is a disable_functions php.ini option that will allow you to disable any functions you see fit:
http://www.php.net/manual/en/feature...able-functions