Use PHPINFO to implement PHP configuration statistics process

Everyone knows that phpinfo() is used to display server configuration. It is a very useful tool after installing a new server, and it is a very useful tool for communicating with various administrators.

Of course, after use, it is usually removed or only provided to a small number of people. Indeed, phpinfo itself may be very dangerous. Sometimes it even has XSS injection flaws. Even when you feel safe, phpinfo will expose some of your configuration constructs, so it is recommended to stay away from it.

It is a pity that it is a very common thing to use the phpinfo page as part of the web server, and search engines often pick up its information. There are thousands of phpinfo() pages in on various search engines such as yahoo. Just search 'phpinfo()' 'GoogleBot' and "Zend Scripting Language Engine" on your yahoo to see them. See Ilia's article - How to protect your phpinfo() Reliably locating phpinfo (18 visites)).

Of course on the other hand, being able to collect so much phpinfo information around the world is a huge asset for us. Once we have the URL address, we just download the phpinfo() file, then we parse it and store it as the corresponding data, that's what I'm doing.

I got 12000 phpinfo() on the intranet. 11,048 of them are cited here. 11,000 is only a drop in the ocean among the millions of php sites. But compared with the number in search engines such as Google, it also accounts for 1%, so it can also represent some opinions.

How much information can we get from these databases? Is this just an interesting and ordinary connection? Many people think that obtaining phpinfo information in search engines is not too easy, and even requires a certain amount of luck. . This certainty is not a good thing. In fact, let me teach you how to search your website's phpinfo page using this format 'phpinfo site:yoursite.com' and you will be very surprised.

On the other hand 11000 is a pretty big amount. After collecting this phpinfo information, I used it to compare the distribution and quantity information of various php versions. 87% of them are pretty good. Overall, the information is fairly representative.

Okay, after ending the long introduction above, we got some interesting data from this information. Finally, phpinfo contains a lot of information. I used them as templates to extract some crossover content.

Ending

The configuration data is always so unexpected or expected. After reading this data, we found that there are still many areas that need guidance.

Generally speaking, many configurations are very common values. We found that many people who develop with Php have not understood the contents of the php.ini file in detail and understand it...

Related articles:

Why was it modified? php.ini but phpinfo() has not changed

How to block the phpinfo() function

Local Value (local variable) Master in phpinfo The difference between Value (main variable)