phpinfo() Found

Description

The phpinfo() method in the PHP programming language discloses a large amount of information about the PHP, extensions, server, and environments. Since different environments have a different setup, the phpinfo() can help to figure out the configurations. It can also facilitate the debugging process. Using this function call in the production environment can be dangerous because the provided information is valuable for attackers to develop their attack.

Recommendation

Remove the page or remove the phpinfo() function call.

References

• PHP phpinfo
• CWE-200
• OWASP 2007-A6
• OWASP 2021-A1