eclectica
2004-03-12, 11:17
info.php is a fun little script which when uploaded to a site, sends back a ton of information. I think some people fear having it publicly available, because it gives hackers more knowledge about a system they want to take down.
Since we tend to view php files online, I thought at first that php script files would open with a browser. php files can be opened and edited in notepad. I think of php files as sexed up text files, the way an html file is. On my computer, the original association of php files was with Adobe Photoparade, so I had to change it.
You can create the info.php file by putting the following into a text file, and then renaming it as info.php:
<? phpinfo(); ?>
Now upload the file to a website running Linux, and you will get this result:
http://www.p2pjihad.org/info.php
As you can see, it doesn't do anything if it is uploaded onto a website with a Micro$oft® server:
http://www.tatom.org/public/info.php
I actually had a practical use for this info.php file. I uploaded it to this site 3-3-3.org to see the GD version. I needed to know what version this site was using, so that I could put image verification in the registration process.
Since we tend to view php files online, I thought at first that php script files would open with a browser. php files can be opened and edited in notepad. I think of php files as sexed up text files, the way an html file is. On my computer, the original association of php files was with Adobe Photoparade, so I had to change it.
You can create the info.php file by putting the following into a text file, and then renaming it as info.php:
<? phpinfo(); ?>
Now upload the file to a website running Linux, and you will get this result:
http://www.p2pjihad.org/info.php
As you can see, it doesn't do anything if it is uploaded onto a website with a Micro$oft® server:
http://www.tatom.org/public/info.php
I actually had a practical use for this info.php file. I uploaded it to this site 3-3-3.org to see the GD version. I needed to know what version this site was using, so that I could put image verification in the registration process.