Clarified expose_php behaviour

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@312468 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
Philip Olson 2011-06-25 20:57:58 +00:00
parent 086dc12715
commit 5d41d5c8b7

View file

@ -3919,10 +3919,16 @@ auto_prepend_file=security.php
</term>
<listitem>
<para>
Decides whether PHP may expose the fact that it is installed on the server
(e.g. by adding its signature to the Web server header). It is no security
threat in any way, but it makes it possible to determine whether you use PHP
on your server or not.
Exposes to the world that PHP is installed on the server, which includes the
PHP version within the HTTP header (e.g., X-Powered-By: PHP/5.3.7). The PHP logo
guids are also exposed, thus appending them to the URL of a PHP enabled site
will display the appropriate logo
(e.g., <link xlink:href="&url.php;?=PHPE9568F34-D428-11d2-A769-00AA001ACF42">&url.php;?=PHPE9568F34-D428-11d2-A769-00AA001ACF42</link>).
This also affects the output of <function>phpinfo</function>, as when disabled, the PHP logo
and credits information will not be displayed.
</para>
<para>
See also <function>php_logo_guid</function> and <function>phpcredits</function>.
</para>
</listitem>
</varlistentry>