Scan flags items already addressed

  • Resolved sam69

    (@sam69)


    1 year, 3 months ago

    I’ve already checked and doubled checked PHP expose and PHP display_errors and the scan still flags them as not done. I know I can click ignore but why would it do so? Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor Maya

    (@tdgu)

    1 year, 3 months ago

    Hi,
    Apparently, this is what the system reports through the ini_get() function https://www.php.net/manual/en/function.ini-get.php

    They may be overwritten by your server settings. Can you create a file on your WordPress root and add the following lines:

    <?php
   phpinfo();
?>

    Then call the file through your domain and notice the values for the following directives:
    – expose_php
    – display_errors

    You should see 2 columns, the Local Value and Master Value.

    Thanks

    Thread Starter sam69

    (@sam69)

    1 year, 3 months ago

    Sorry missed your reply. Here are the values for local and master:

    expose_php On On

    display_errors Off Off

    And here is what the plugin shows:

    PHP display_errors

    The display_errors is ON.
    To fix this security issue, change the php.ini:
    display_errors = "off"
    or within .htaccess:
    php_flag display_errors off
    or within wp-config.php:
    ini_set("display_errors", "0");.

    PHP expose

    The expose_php is ON. To fix this security issue, change the php.ini:
    expose_php = "off"
    or within .htaccess:
    php_flag expose_php off.

    And what I have I have in my php.ini file:

    expose_php = off

    And what I have in my .htaccess file:

    ini_set(‘display_errors’,’Off’);

    ini_set(‘error_reporting’, E_ALL );

    define(‘WP_DEBUG’, false);

    define(‘WP_DEBUG_DISPLAY’, false);

    Thanks

    Thread Starter sam69

    (@sam69)

    1 year, 3 months ago

    Update, not sure what I did or changed but now your plugin and phpinfo both show off so I would consider this resolved.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Scan flags items already addressed’ is closed to new replies.