Detections
Analytics

OWASP PHP Best Practice

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: OWASP PHP Best Practice

Updated: 4/2/2021

Authority: OWASP

Plugin: Unix

Revision: 1.16

Estimated Item Count: 8

Audit Items

DescriptionCategories
0. Check if file @PHP_INI_LOC@ exists. Should fail if @PHP_INI_LOC@ does not exist

CONFIGURATION MANAGEMENT

1. Check if register_globals is set to Off.
2. Check if safe_mode is set to On.
3. Check if safe_mode_gid is set to On.
4. Check if a set of functions are disabled using 'disable_functions' directive.
6. Check if 'allow_url_fopen' directive is set to Off.
10. Check if 'magic_quotes_gpc ' directive is set to Off.
11. Check if 'magic_quotes_runtime' directive is set to Off.