1
0
mirror of https://github.com/e107inc/e107.git synced 2025-01-17 20:58:30 +01:00
php-e107/e107_admin/phpinfo.php

81 lines
2.8 KiB
PHP
Raw Normal View History

2006-12-02 04:36:16 +00:00
<?php
/*
2009-11-12 14:30:07 +00:00
* e107 website system
*
2009-11-18 01:06:08 +00:00
* Copyright (C) 2008-2009 e107 Inc (e107.org)
2009-11-12 14:30:07 +00:00
* Released under the terms and conditions of the
* GNU General Public License (http://www.gnu.org/licenses/gpl.txt)
*
*
*
* $Source: /cvs_backup/e107_0.8/e107_admin/phpinfo.php,v $
2010-02-10 18:18:01 +00:00
* $Revision$
* $Date$
* $Author$
2009-11-12 14:30:07 +00:00
*/
2006-12-02 04:36:16 +00:00
require_once("../class2.php");
if (!getperms("0")) {
2013-02-28 14:27:01 -08:00
header("location:".e_BASE."index.php");
exit;
2006-12-02 04:36:16 +00:00
}
$e_sub_cat = 'phpinfo';
require_once("auth.php");
2013-02-28 14:27:01 -08:00
2006-12-02 04:36:16 +00:00
ob_start();
phpinfo();
$phpinfo .= ob_get_contents();
$phpinfo = preg_replace("#^.*<body>#is", "", $phpinfo);
2013-02-28 14:27:01 -08:00
$phpinfo = str_replace("font","span",$phpinfo);
$phpinfo = str_replace("</body></html>","",$phpinfo);
$phpinfo = str_replace('border="0"','',$phpinfo);
2015-07-16 14:02:32 -07:00
//$phpinfo = str_replace('<table ','<table class="table table-striped adminlist" ',$phpinfo);
2013-02-28 14:27:01 -08:00
$phpinfo = str_replace('name=','id=',$phpinfo);
2015-07-16 14:02:32 -07:00
$phpinfo = str_replace('class="e"','class="forumheader2 text-left"',$phpinfo);
$phpinfo = str_replace('class="v"','class="forumheader3 text-left"',$phpinfo);
$phpinfo = str_replace('class="v"','class="forumheader3 text-left"',$phpinfo);
2013-02-28 14:27:01 -08:00
$phpinfo = str_replace('class="h"','class="fcaption"',$phpinfo);
2015-07-16 14:02:32 -07:00
$phpinfo = str_replace('<table cellpadding="3" width="600">', '<table class="table table-striped adminlist"><colgroup><col style="width:30%" /><col style="width:auto" /></colgroup>', $phpinfo);
2013-02-28 14:27:01 -08:00
$mes = e107::getMessage();
$security_risks = array(
"allow_url_fopen" => 'If you have Curl enabled, you should consider disabling this feature.',
"allow_url_include" => 'This is a security risk and is not needed by e107.',
"display_errors" => 'On a production server, it is better to disable the displaying of errors in the browser.',
"expose_php" => 'Disabling this will hide your PHP version from browsers.',
"register_globals" => 'This is a security risk and should be disabled.'
);
foreach($security_risks as $risk=>$diz)
{
if(ini_get($risk))
{
2015-07-16 14:02:32 -07:00
$srch = '<tr><td class="forumheader2 text-left">'.$risk.'</td><td class="forumheader3">';
$repl = '<tr><td class="forumheader2 text-left">'.$risk.'</td><td title="'.$tp->toAttribute($diz).'" class="forumheader3 alert alert-danger">';
2013-02-28 14:27:01 -08:00
$phpinfo = str_replace($srch,$repl,$phpinfo);
$mes->addWarning("<b>".$risk."</b>: ".$diz);
}
}
if($sessionSavePath = ini_get('session.save_path'))
{
if(!is_writable($sessionSavePath))
{
$mes->addError("<b>session.save_path</b> is not writable! That can cause major issues with your site.");
}
}
2013-02-28 14:27:01 -08:00
// $phpinfo = preg_replace("#^.*<body>#is", "", $phpinfo);
2006-12-02 04:36:16 +00:00
ob_end_clean();
if(deftrue('e_DEBUG'))
{
$mes->addDebug("Session ID: ".session_id());
}
2013-02-28 14:27:01 -08:00
$ns->tablerender("PHPInfo", $mes->render(). $phpinfo);
2006-12-02 04:36:16 +00:00
require_once("footer.php");
?>