PHP安全配置范例

Build Date

Sep 21 2017 15:58:23

Configure Command

‘./configure’ ‘–prefix=/usr/local/php’ ‘–with-config-file-path=/usr/local/php/etc’ ‘–enable-fpm’ ‘–with-fpm-user=www’ ‘–with-fpm-group=www’ ‘–with-mysql=mysqlnd’ ‘–with-mysqli=mysqlnd’ ‘–with-pdo-mysql=mysqlnd’ ‘–with-iconv-dir’ ‘–with-freetype-dir=/usr/local/freetype’ ‘–with-jpeg-dir’ ‘–with-png-dir’ ‘–with-zlib’ ‘–with-libxml-dir=/usr’ ‘–enable-xml’ ‘–disable-rpath’ ‘–enable-bcmath’ ‘–enable-shmop’ ‘–enable-sysvsem’ ‘–enable-inline-optimization’ ‘–with-curl’ ‘–enable-mbregex’ ‘–enable-mbstring’ ‘–with-mcrypt’ ‘–enable-ftp’ ‘–with-gd’ ‘–enable-gd-native-ttf’ ‘–with-openssl’ ‘–with-mhash’ ‘–enable-pcntl’ ‘–enable-sockets’ ‘–with-xmlrpc’ ‘–enable-zip’ ‘–enable-soap’ ‘–with-gettext’ ‘–disable-fileinfo’

Server API

FPM/FastCGI

Virtual Directory Support

disabled

Configuration File (php.ini) Path

/usr/local/php/etc

Loaded Configuration File

/usr/local/php/etc/php.ini

Scan this dir for additional .ini files

(none)

Additional .ini files parsed

(none)

PHP API

20100412

PHP Extension

20100525

Zend Extension

220100525

Zend Extension Build

API220100525,NTS

PHP Extension Build

API20100525,NTS

Debug Build

no

Thread Safety

disabled

Zend Signal Handling

disabled

Zend Memory Manager

enabled

Zend Multibyte Support

provided by mbstring

IPv6 Support

enabled

DTrace Support

disabled

Registered PHP Streams

https, ftps, compress.zlib, php, file, glob, data, http, ftp, phar, zip

Registered Stream Socket Transports

tcp, udp, unix, udg, ssl, sslv3, sslv2, tls

Registered Stream Filters

zlib., convert.iconv., mcrypt., mdecrypt., string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk

bcmath.scale

0

0

cgi.discard_path

0

0

cgi.fix_pathinfo

0

0

cgi.force_redirect

1

1

cgi.nph

0

0

cgi.redirect_status_env

no value

no value

cgi.rfc2616_headers

0

0

fastcgi.error_header

no value

no value

fastcgi.logging

1

1

fpm.config

no value

no value

allow_url_fopen

On

On

allow_url_include

Off

Off

always_populate_raw_post_data

Off

Off

arg_separator.input

&

&

arg_separator.output

&

&

asp_tags

Off

Off

auto_append_file

no value

no value

auto_globals_jit

On

On

auto_prepend_file

no value

no value

browscap

no value

no value

default_charset

no value

no value

default_mimetype

text/html

text/html

disable_classes

no value

no value

disable_functions

passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,popen,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server

passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,popen,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server

display_errors

Off

Off

display_startup_errors

Off

Off

doc_root

no value

no value

docref_ext

no value

no value

docref_root

no value

no value

enable_dl

Off

Off

enable_post_data_reading

On

On

error_append_string

no value

no value

error_log

no value

no value

error_prepend_string

no value

no value

error_reporting

22527

22527

exit_on_timeout

Off

Off

expose_php

On

On

extension_dir

/usr/local/php/lib/php/extensions/no-debug-non-zts-20100525

/usr/local/php/lib/php/extensions/no-debug-non-zts-20100525

file_uploads

On

On

highlight.comment

#FF8000

#FF8000

highlight.default

#0000BB

#0000BB

highlight.html

#000000

#000000

highlight.keyword

#007700

#007700

highlight.string

#DD0000

#DD0000

html_errors

On

On

ignore_repeated_errors

Off

Off

ignore_repeated_source

Off

Off

ignore_user_abort

Off

Off

implicit_flush

Off

Off

include_path

.:/usr/local/php/lib/php

.:/usr/local/php/lib/php

log_errors

On

On

log_errors_max_len

1024

1024

mail.add_x_header

On

On

mail.force_extra_parameters

no value

no value

mail.log

no value

no value

max_execution_time

300

300

max_file_uploads

20

20

max_input_nesting_level

64

64

max_input_time

60

60

max_input_vars

1000

1000

memory_limit

128M

128M

open_basedir

/home/wwwroot/default:/tmp/:/proc/

no value

output_buffering

4096

4096

output_handler

no value

no value

post_max_size

50M

50M

precision

14

14

realpath_cache_size

16K

16K

realpath_cache_ttl

120

120

register_argc_argv

Off

Off

report_memleaks

On

On

report_zend_debug

On

On

request_order

GP

GP

sendmail_from

no value

no value

sendmail_path

-t -i

-t -i

serialize_precision

17

17

short_open_tag

On

On

SMTP

localhost

localhost

smtp_port

25

25

sql.safe_mode

Off

Off

track_errors

Off

Off

unserialize_callback_func

no value

no value

upload_max_filesize

50M

50M

upload_tmp_dir

no value

no value

user_dir

no value

no value

user_ini.cache_ttl

300

300

user_ini.filename

.user.ini

.user.ini

variables_order

GPCS

GPCS

xmlrpc_error_number

0

0

xmlrpc_errors

Off

Off

zend.detect_unicode

On

On

zend.enable_gc

On

On

zend.multibyte

Off

Off

zend.script_encoding

no value

no value

cURL Information

7.19.7

Age

3

Features

AsynchDNS

No

Debug

No

GSS-Negotiate

Yes

IDN

Yes

IPv6

Yes

Largefile

Yes

NTLM

Yes

SPNEGO

No

SSL

Yes

SSPI

No

krb4

No

libz

Yes

CharConv

No

Protocols

tftp, ftp, telnet, dict, ldap, ldaps, http, file, https, ftps, scp, sftp

Host

x86_64-redhat-linux-gnu

SSL Version

NSS/3.27.1

ZLib Version

1.2.3

libSSH Version

libssh2/1.4.2

“Olson” Timezone Database Version

2014.8

Timezone Database

internal

Default timezone

PRC

date.default_latitude

31.7667

31.7667

date.default_longitude

35.2333

35.2333

date.sunrise_zenith

90.583333

90.583333

date.sunset_zenith

90.583333

90.583333

date.timezone

PRC

PRC

DOM/XML API Version

20031129

libxml Version

2.7.6

HTML Support

enabled

XPath Support

enabled

XPointer Support

enabled

Schema Support

enabled

RelaxNG Support

enabled

Revision

$Id: ad78b4a085153b8c7f4d6db5dc69df40e969c343 $

filter.default

unsafe_raw

unsafe_raw

filter.default_flags

no value

no value

GD Version

bundled (2.1.0 compatible)

FreeType Support

enabled

FreeType Linkage

with freetype

FreeType Version

2.4.12

GIF Read Support

enabled

GIF Create Support

enabled

JPEG Support

enabled

libJPEG Version

6b

PNG Support

enabled

libPNG Version

1.2.49

WBMP Support

enabled

XBM Support

enabled

gd.jpeg_ignore_warning

0

0

Hashing Engines

md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost adler32 crc32 crc32b fnv132 fnv164 joaat haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5

iconv implementation

glibc

iconv library version

2.12

iconv.input_encoding

ISO-8859-1

ISO-8859-1

iconv.internal_encoding

ISO-8859-1

ISO-8859-1

iconv.output_encoding

ISO-8859-1

ISO-8859-1

json version

1.2.1

libXML Compiled Version

2.7.6

libXML Loaded Version

20706

libXML streams

enabled

Multibyte string engine

libmbfl

HTTP input encoding translation

disabled

libmbfl version

1.3.2

Multibyte regex (oniguruma) backtrack check

On

Multibyte regex (oniguruma) version

4.7.1

mbstring.detect_order

no value

no value

mbstring.encoding_translation

Off

Off

mbstring.func_overload

0

0

mbstring.http_input

pass

pass

mbstring.http_output

pass

pass

mbstring.http_output_conv_mimetypes

^(text/|application/xhtml+xml)

^(text/|application/xhtml+xml)

mbstring.internal_encoding

no value

no value

mbstring.language

neutral

neutral

mbstring.strict_detection

Off

Off

mbstring.substitute_character

no value

no value

mcrypt_filter support

enabled

Version

2.5.8

Api No

20021217

Supported ciphers

cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledes

Supported modes

cbc cfb ctr ecb ncfb nofb ofb stream

mcrypt.algorithms_dir

no value

no value

mcrypt.modes_dir

no value

no value

MHASH API Version

Emulated Support

Active Persistent Links

0

Active Links

0

Client API version

mysqlnd 5.0.10 - 20111026 - $Id: c85105d7c6f7d70d609bb4c000257868a40840ab $

mysql.allow_local_infile

On

On

mysql.allow_persistent

On

On

mysql.connect_timeout

60

60

mysql.default_host

no value

no value

mysql.default_password

no value

no value

mysql.default_port

no value

no value

mysql.default_socket

no value

no value

mysql.default_user

no value

no value

mysql.max_links

Unlimited

Unlimited

mysql.max_persistent

Unlimited

Unlimited

mysql.trace_mode

Off

Off

Client API library version

mysqlnd 5.0.10 - 20111026 - $Id: c85105d7c6f7d70d609bb4c000257868a40840ab $

Active Persistent Links

0

Inactive Persistent Links

0

Active Links

0

mysqli.allow_local_infile

On

On

mysqli.allow_persistent

On

On

mysqli.default_host

no value

no value

mysqli.default_port

3306

3306

mysqli.default_pw

no value

no value

mysqli.default_socket

no value

no value

mysqli.default_user

no value

no value

mysqli.max_links

Unlimited

Unlimited

mysqli.max_persistent

Unlimited

Unlimited

mysqli.reconnect

Off

Off

Version

mysqlnd 5.0.10 - 20111026 - $Id: c85105d7c6f7d70d609bb4c000257868a40840ab $

Compression

supported

SSL

supported

Command buffer size

4096

Read buffer size

32768

Read timeout

31536000

Collecting statistics

Yes

Collecting memory statistics

No

Tracing

n/a

Loaded plugins

mysqlnd,example,debug_trace,auth_plugin_mysql_native_password,auth_plugin_mysql_clear_password

API Extensions

pdo_mysql,mysqli,mysql

bytes_sent

0

bytes_received

0

packets_sent

0

packets_received

0

protocol_overhead_in

0

protocol_overhead_out

0

bytes_received_ok_packet

0

bytes_received_eof_packet

0

bytes_received_rset_header_packet

0

bytes_received_rset_field_meta_packet

0

bytes_received_rset_row_packet

0

bytes_received_prepare_response_packet

0

bytes_received_change_user_packet

0

packets_sent_command

0

packets_received_ok

0

packets_received_eof

0

packets_received_rset_header

0

packets_received_rset_field_meta

0

packets_received_rset_row

0

packets_received_prepare_response

0

packets_received_change_user

0

result_set_queries

0

non_result_set_queries

0

no_index_used

0

bad_index_used

0

slow_queries

0

buffered_sets

0

unbuffered_sets

0

ps_buffered_sets

0

ps_unbuffered_sets

0

flushed_normal_sets

0

flushed_ps_sets

0

ps_prepared_never_executed

0

ps_prepared_once_executed

0

rows_fetched_from_server_normal

0

rows_fetched_from_server_ps

0

rows_buffered_from_client_normal

0

rows_buffered_from_client_ps

0

rows_fetched_from_client_normal_buffered

0

rows_fetched_from_client_normal_unbuffered

0

rows_fetched_from_client_ps_buffered

0

rows_fetched_from_client_ps_unbuffered

0

rows_fetched_from_client_ps_cursor

0

rows_affected_normal

0

rows_affected_ps

0

rows_skipped_normal

0

rows_skipped_ps

0

copy_on_write_saved

0

copy_on_write_performed

0

command_buffer_too_small

0

connect_success

0

connect_failure

0

connection_reused

0

reconnect

0

pconnect_success

0

active_connections

0

active_persistent_connections

0

explicit_close

0

implicit_close

0

disconnect_close

0

in_middle_of_command_close

0

explicit_free_result

0

implicit_free_result

0

explicit_stmt_close

0

implicit_stmt_close

0

mem_emalloc_count

0

mem_emalloc_amount

0

mem_ecalloc_count

0

mem_ecalloc_amount

0

mem_erealloc_count

0

mem_erealloc_amount

0

mem_efree_count

0

mem_efree_amount

0

mem_malloc_count

0

mem_malloc_amount

0

mem_calloc_count

0

mem_calloc_amount

0

mem_realloc_count

0

mem_realloc_amount

0

mem_free_count

0

mem_free_amount

0

mem_estrndup_count

0

mem_strndup_count

0

mem_estndup_count

0

mem_strdup_count

0

proto_text_fetched_null

0

proto_text_fetched_bit

0

proto_text_fetched_tinyint

0

proto_text_fetched_short

0

proto_text_fetched_int24

0

proto_text_fetched_int

0

proto_text_fetched_bigint

0

proto_text_fetched_decimal

0

proto_text_fetched_float

0

proto_text_fetched_double

0

proto_text_fetched_date

0

proto_text_fetched_year

0

proto_text_fetched_time

0

proto_text_fetched_datetime

0

proto_text_fetched_timestamp

0

proto_text_fetched_string

0

proto_text_fetched_blob

0

proto_text_fetched_enum

0

proto_text_fetched_set

0

proto_text_fetched_geometry

0

proto_text_fetched_other

0

proto_binary_fetched_null

0

proto_binary_fetched_bit

0

proto_binary_fetched_tinyint

0

proto_binary_fetched_short

0

proto_binary_fetched_int24

0

proto_binary_fetched_int

0

proto_binary_fetched_bigint

0

proto_binary_fetched_decimal

0

proto_binary_fetched_float

0

proto_binary_fetched_double

0

proto_binary_fetched_date

0

proto_binary_fetched_year

0

proto_binary_fetched_time

0

proto_binary_fetched_datetime

0

proto_binary_fetched_timestamp

0

proto_binary_fetched_string

0

proto_binary_fetched_blob

0

proto_binary_fetched_enum

0

proto_binary_fetched_set

0

proto_binary_fetched_geometry

0

proto_binary_fetched_other

0

init_command_executed_count

0

init_command_failed_count

0

com_quit

0

com_init_db

0

com_query

0

com_field_list

0

com_create_db

0

com_drop_db

0

com_refresh

0

com_shutdown

0

com_statistics

0

com_process_info

0

com_connect

0

com_process_kill

0

com_debug

0

com_ping

0

com_time

0

com_delayed_insert

0

com_change_user

0

com_binlog_dump

0

com_table_dump

0

com_connect_out

0

com_register_slave

0

com_stmt_prepare

0

com_stmt_execute

0

com_stmt_send_long_data

0

com_stmt_close

0

com_stmt_reset

0

com_stmt_set_option

0

com_stmt_fetch

0

com_deamon

0

bytes_received_real_data_normal

0

bytes_received_real_data_ps

0

stat1

0

stat2

0

OpenSSL Library Version

OpenSSL 1.0.1e-fips 11 Feb 2013

OpenSSL Header Version

OpenSSL 1.0.1e-fips 11 Feb 2013

PCRE Library Version

8.36 2014-09-26

pcre.backtrack_limit

1000000

1000000

pcre.recursion_limit

100000

100000

PDO drivers

mysql, sqlite

Client API version

mysqlnd 5.0.10 - 20111026 - $Id: c85105d7c6f7d70d609bb4c000257868a40840ab $

pdo_mysql.default_socket

/tmp/mysql.sock

/tmp/mysql.sock

SQLite Library

3.7.7.1

Phar EXT version

2.0.1

Phar API version

1.1.1

SVN revision

$Id: 223bfe84c633117896adf55fb080c62e72480175 $

Phar-based phar archives

enabled

Tar-based phar archives

enabled

ZIP-based phar archives

enabled

gzip compression

enabled

bzip2 compression

disabled (install pecl/bz2)

Native OpenSSL support

enabled

phar.cache_list

no value

no value

phar.readonly

On

On

phar.require_hash

On

On

Version

$Id: f6367cdb4e3f392af4a6d441a6641de87c2e50c4 $

Registered save handlers

files user

Registered serializer handlers

php php_binary

session.auto_start

Off

Off

session.cache_expire

180

180

session.cache_limiter

nocache

nocache

session.cookie_domain

no value

no value

session.cookie_httponly

Off

Off

session.cookie_lifetime

0

0

session.cookie_path

/

/

session.cookie_secure

Off

Off

session.entropy_file

/dev/urandom

/dev/urandom

session.entropy_length

32

32

session.gc_divisor

1000

1000

session.gc_maxlifetime

1440

1440

session.gc_probability

1

1

session.hash_bits_per_character

5

5

session.hash_function

0

0

session.name

PHPSESSID

PHPSESSID

session.referer_check

no value

no value

session.save_handler

files

files

session.save_path

no value

no value

session.serialize_handler

php

php

session.upload_progress.cleanup

On

On

session.upload_progress.enabled

On

On

session.upload_progress.freq

1%

1%

session.upload_progress.min_freq

1

1

session.upload_progress.name

PHP_SESSION_UPLOAD_PROGRESS

PHP_SESSION_UPLOAD_PROGRESS

session.upload_progress.prefix

upload_progress_

upload_progress_

session.use_cookies

On

On

session.use_only_cookies

On

On

session.use_trans_sid

0

0

Revision

$Id: 16070fc92ad6f69cebb2d52ad3f02794f833ce39 $

Schema support

enabled

Soap Server

enabled

soap.wsdl_cache

1

1

soap.wsdl_cache_dir

/tmp

/tmp

soap.wsdl_cache_enabled

1

1

soap.wsdl_cache_limit

5

5

soap.wsdl_cache_ttl

86400

86400

Interfaces

Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject

Classes

AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, CallbackFilterIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveCallbackFilterIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueException

SQLite3 module version

0.7

SQLite Library

3.7.7.1

sqlite3.extension_dir

no value

no value

Path to sendmail

-t -i

assert.active

1

1

assert.bail

0

0

assert.callback

no value

no value

assert.quiet_eval

0

0

assert.warning

1

1

auto_detect_line_endings

0

0

default_socket_timeout

60

60

from

no value

no value

url_rewriter.tags

a=href,area=href,frame=src,input=src,form=fakeentry

a=href,area=href,frame=src,input=src,form=fakeentry

user_agent

no value

no value

XML Namespace Support

active

libxml2 Version

2.7.6

php extension version

0.51

author

Dan Libby

homepage

http://xmlrpc-epi.sourceforge.net

open sourced by

Epinions.com

License Path

no value

Obfuscation level

0

Extension Version

$Id: abc21c7f1559e732dba6db94c69ecf638ae5fa3f $

Zip version

1.11.0

Libzip version

0.10.1

Stream Wrapper

compress.zlib://

Stream Filter

zlib.inflate, zlib.deflate

Compiled Version

1.2.3

Linked Version

1.2.3

zlib.output_compression

Off

Off

zlib.output_compression_level

-1

-1

zlib.output_handler

no value

no value

sysvsem

USER

www

HOME

/home/www

_SERVER[“USER”]

www

_SERVER[“HOME”]

/home/www

_SERVER[“FCGI_ROLE”]

RESPONDER

_SERVER[“SCRIPT_FILENAME”]

/home/wwwroot/default/phpinfo.php

_SERVER[“QUERY_STRING”]

no value

_SERVER[“REQUEST_METHOD”]

GET

_SERVER[“CONTENT_TYPE”]

no value

_SERVER[“CONTENT_LENGTH”]

no value

_SERVER[“SCRIPT_NAME”]

/phpinfo.php

_SERVER[“REQUEST_URI”]

/phpinfo.php

_SERVER[“DOCUMENT_URI”]

/phpinfo.php

_SERVER[“DOCUMENT_ROOT”]

/home/wwwroot/default

_SERVER[“SERVER_PROTOCOL”]

HTTP/1.1

_SERVER[“GATEWAY_INTERFACE”]

CGI/1.1

_SERVER[“SERVER_SOFTWARE”]

nginx/1.8.0

_SERVER[“REMOTE_ADDR”]

58.63.83.179

_SERVER[“REMOTE_PORT”]

11968

_SERVER[“SERVER_ADDR”]

107.183.123.18

_SERVER[“SERVER_PORT”]

80

_SERVER[“SERVER_NAME”]

www.lnmp.org

_SERVER[“REDIRECT_STATUS”]

200

_SERVER[“HTTP_HOST”]

107.183.123.18

_SERVER[“HTTP_CONNECTION”]

keep-alive

_SERVER[“HTTP_UPGRADE_INSECURE_REQUESTS”]

1

_SERVER[“HTTP_USER_AGENT”]

Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36

_SERVER[“HTTP_ACCEPT”]

text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8

_SERVER[“HTTP_DNT”]

1

_SERVER[“HTTP_REFERER”]

http://107.183.123.18/

_SERVER[“HTTP_ACCEPT_ENCODING”]

gzip, deflate

_SERVER[“HTTP_ACCEPT_LANGUAGE”]

zh-CN,zh;q=0.8,en;q=0.6

_SERVER[“PHP_SELF”]

/phpinfo.php

_SERVER[“REQUEST_TIME_FLOAT”]

1509470164.8827

_SERVER[“REQUEST_TIME”]

1509470164