Using Phpinfo to implement PHP's configuration statistics process

Everyone knows that phpinfo (), which is used to display server configuration, is a useful tool for installing new servers and is a very useful tool to communicate with various administrators.

Of course, after use, it is usually removed or only provided to a small number of people, indeed, phpinfo itself may be very dangerous. Sometimes he may even have an XSS injection flaw. Even when you feel safe, phpinfo will expose some of your configuration constructs, so it is recommended to keep it away.

Unfortunately, it's a very common thing to take phpinfo pages as part of a Web server now, and search engines often pick up their information, and thousands of phpinfo () are on various search engines like Yahoo. Just search on your Yahoo ' phpinfo () ' GoogleBot ' and ' Zend scripting Language Engine ' to see them. See Ilia's article-How to Protect your phpinfo () reliably locating phpinfo (visites)).

On the other side, of course, it's a huge asset for us to be able to gather so much phpinfo information around the world. Once we get the URL address, we just need to download the phpinfo () file and then we analyze it and store it as the corresponding data, which is what I'm doing.

I got 12,000 phpinfo () on the intrenet. Here is a reference to the 11,048 useful. 11000 of the number of PHP sites in the millions can only be counted as bucket. But compared with the number of search engines such as Google, it also accounts for 1%, so it can also represent some opinions.

How much information can we get from these databases? Is this just an interesting common connection? Many people think that it is not easy to get phpinfo information in search engines, even if it takes some luck. This certainty is not a good thing. In fact, let me teach you how to search your site's phpinfo page, use this format ' Phpinfo site:yoursite.com ' and then you'll be very surprised.

On the other hand 11000 is a quite large quantity. After collecting the phpinfo information, I used to compare the distribution and quantity information of various PHP versions. 87% of them are pretty good. In general, this information is fairly representative.

Well, after such a long introduction, we've got some interesting data from this stuff. Finally, Phpinfo contains a lot of information. I took them as templates to extract some of the overlapping content.

End

Configuration data is always so unexpected or expected. After reading this data, we find that there are still many areas that need guidance.

In general, many configurations are very generic values. We found that many of the people who developed PHP did not have a detailed understanding of the contents of the php.ini file, and understood it ...