开发者

phpinfo showing on pages without being called

Some pages are showing the phpinfo() output (in HTML so not php -i) even开发者_开发知识库 though there is no call to phpinfo() in that page.

The pages include a number of files, but i have grep'd the whole directory from base but cannot find any instance of phpinfo() or "phpinfo" etc.

I've also looked at all "shell", "exec" and "eval" that could generate phpinfo somehow but it doesn't show anything.

How could phpinfo() be showing up on these pages?


Note that php -i will output HTML when your SAPI is CGI, even when invoked from the command line.

Still, try to run the file via CLI to see if if gives the same output. Might be Apache autoprepending another file. Check your httpdconf and .htaccess file if the output is different.

If the output is the same, check your php.ini for the directives auto_prepend_file and auto_append_file to see if there is any filenames in there.

Apart from this, no idea. Maybe install XDebug and step through the code to see where it happens.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜