# Do not keep a public accessible phpinfo on your server

**URL:** <https://forum.kirupa.com/t/do-not-keep-a-public-accessible-phpinfo-on-your-server/218760>\
**Category:** programming\
**Created:** [March 10, 2007, 5:46pm UTC](https://forum.kirupa.com/t/do-not-keep-a-public-accessible-phpinfo-on-your-server/218760 "2007-03-10T17:46:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![idoik](https://avatars.discourse-cdn.com/v4/letter/i/97f17d/32.png) [@idoik](https://forum.kirupa.com/u/idoik)\
**Post date:** [March 10, 2007, 5:46pm UTC](https://forum.kirupa.com/t/do-not-keep-a-public-accessible-phpinfo-on-your-server/218760/1 "2007-03-10T17:46:34Z")

</div>

its prone to xss site scripting attacks(php4._._)

[SIZE=“1”]remove this area from my post if proof of concept showing is not allowed[/SIZE]  
\<from here\>  
[COLOR=“White”]?a[]=\<script\>alert(/XSS/);\</script\>[/COLOR]  
\<to here\>

here is some info on what it xss cross site scripting is

> **[What is Cross-site Scripting and How Can You Fix it?](https://www.acunetix.com/websitesecurity/cross-site-scripting/)**
>
> This article will show you how Cross-site Scripting attacks work and how you can use Acunetix WVS to protect your website against them.