On Tuesday 03 June 2003 15:30, silent needle wrote:

> A: BACKGROUND(from php.net)
> int phpinfo ( [int what])
> Outputs a large amount of information about the current state of PHP.

And because of that amount of information it's a security issue if 
phpinfo() is publically available at all, not just because you can do XSS 
with it. (Of course it should be fixed anyway.)

Regards
 Daniel

-- 
http://www.danielnaber.de

Reply via email to