diff --git a/appendices/ini.xml b/appendices/ini.xml index 70a3757a93..737f81d8cd 100644 --- a/appendices/ini.xml +++ b/appendices/ini.xml @@ -3919,10 +3919,16 @@ auto_prepend_file=security.php - Decides whether PHP may expose the fact that it is installed on the server - (e.g. by adding its signature to the Web server header). It is no security - threat in any way, but it makes it possible to determine whether you use PHP - on your server or not. + Exposes to the world that PHP is installed on the server, which includes the + PHP version within the HTTP header (e.g., X-Powered-By: PHP/5.3.7). The PHP logo + guids are also exposed, thus appending them to the URL of a PHP enabled site + will display the appropriate logo + (e.g., &url.php;?=PHPE9568F34-D428-11d2-A769-00AA001ACF42). + This also affects the output of phpinfo, as when disabled, the PHP logo + and credits information will not be displayed. + + + See also php_logo_guid and phpcredits.