PHP modules disclosure scan
The scan
This scan checks your server doesn't reveal the PHP modules installed (this vulnerability is known as "PHP Easter Egg"). This is very sensitive technical information and it should not be disclosed. A hacker only needs a specific request to access this information.
The fix
SecuPress will block access to the address revealing this information on your site.
What if the fix doesn't work ?
For Apache servers : the .htaccess
file is probably not writeable. Access your site via FTP and open up the .htaccess
file. Add in the lines provided by SecuPress in the error message.
For IIS7 servers : the web.config
file is probably not writeable. Access your site via FTP and open up the web.config
file. Add in the lines provided by SecuPress in the error message.
For nginx servers : SecuPress can't access the nginx.conf
file. Access your site via FTP and open up the nginx.conf
file. Add in the lines provided by SecuPress in the error message.