psecio / iniscan

A php.ini scanner for best security practices

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Xdebug disabled

enygma opened this issue · comments

For additional security in a production environment, if Xdebug is installed it should be turned off.

xdebug.remote_enable=1

Hi, do you mind if i take a look into this?

I assume that xdebug.remote_enable=1 is the value that should give a warning and that xdebug.default_enable should be checked also? Am I right?

Correct, it should be 0 (or false) in production, otherwise it'd be a warning. And yes on the default_enable too... (false)

All right, hands on! :)