On Fri, Mar 30, 2001 at 04:32:40PM +0700, juang wrote:
> HI all,
> how to compile php without function phpinfo enalbe. so if user call
> phpinfo() it would be false/error. i would like to build a free web
> server with php but i don't like if the user know what are the tools
> in my server 'couse it's a free server.
>
> is it possible or it's just a stupid question?
I imagine it's possible, but out of curiousity, what harm is there in
allowing phpinfo() to be run? It presents the PHP configuration
settings, many of which may be important to your users when developing
their apps (Is magic_quotes on? Is '.' in the include path? Is
register_globals on?) and info on which PHP modules are available.
(Which version, if any, of GD, XML, etc)
I suppose it may be undesireable to reveal some of the environment
variables (PATH, perhaps), but the solution there isn't to disable
phpinfo(), it's to run the web server from a specifically tailored
environment.
Matt
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
