Main
Index 		Search
Posts 		Who's
Online 		Log
In

Home: Discontinued/Classic Products: Article Manager 1:
security issues

 
 


Galaxy
User

Aug 17, 2008, 2:31 PM

Post #1 of 3 (4544 views)
Shortcut
security issues Can't Post
Hi
We've had an audit on our site by a web security firm and have brought up this issue:

Technical Details
The PHPInfo file is a commonly installed page that displays detailed information about the server and the PHP configuration settings.

Consequence
This sensitive information should not be displayed to the browser as it can assist in further attacks that may require detailed information.

Recommendation
Remove the phpinfo.php file.

Will this stuff the site?
Peace
Andy


Jake
Staff / Moderator


Aug 17, 2008, 6:57 PM

Post #2 of 3 (4542 views)
Shortcut
Re: [Galaxy] security issues [In reply to] Can't Post
Hi Galaxy,

That file has no bearing on the operation of any piece of software on your site, and can be safely removed. It is only there to display information about PHP settings on your site. Smile
-----------------------------------------------------------
Cheers,
Jake Marvin - Product Specialist
support@interactivetools.com

[hr][i][url "http://www.interactivetools.com/consulting/"][b]Hire me![/b][/url]
Save time by getting our experts to help with your project. Template changes, advanced features, full integration, whatever you need. Whether you need one hour or fifty, get it done fast with [url "http://www.interactivetools.com/consulting/"][b]Priority Consulting[/b][/url].[/i]


Galaxy
User

Aug 17, 2008, 7:03 PM

Post #3 of 3 (4540 views)
Shortcut
Re: [Jake] security issues [In reply to] Can't Post
Thought so. Thanks dude