Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12461

System info – are settings in red bad?

$
0
0

Hi,

Just upgraded the BPS plugin across a couple of sites and, looking at the System Info page, I was wondering what the significance of some of the information shown in red is? For example on one of my sites, the system info shows:

PHP Allow URL fopen: <span style=”color: red;”>On</span>
PHP Display Errors: <span style=”color: red;”>On</span>
PHP Expose PHP: <span style=”color: red;”>On</span>
PHP MySQL Allow Persistent Connections: <span style=”color: red;”>On</span>

I am assuming the red means bad and green good, but I have been unable to find any info on the forums or in the help regarding these settings.  The reason for my interest is that my server has been brought down by various attempted hack / DOS attacks recently, so I am keep to have any security risks covered up.

Can you provide any guidance as to what are potentially risky settings shown in System Info, and what if anything we need to do about them? Perhaps in a future update you could change the system info to read something like:

PHP Allow URL fopen: <span style=”color: red;”>On (but that’s ok!)</span>
PHP Display Errors: <span><span style=”color: #ff0000;”>On (would be better if this was off)</span></span>
PHP Expose PHP: <span style=”color: red;”>On (security risk, do this….)</span>
PHP MySQL Allow Persistent Connections: <span style=”color: red;”>On (see here for more info).</span>

As it stands, the red text seems to want to alert me to something, but I’m not sure what!

Cheers guys, James :)


Viewing all articles
Browse latest Browse all 12461

Trending Articles