Fixing PHP Security Holes using PhpSecInfo

Lately, I have come across an amazing tool PHPSecinfo that allows us to fix PHP security holes by scanning and then recommending changes in php.ini.

PhpSecInfo is an equivalent to the phpinfo() function that reports security information about the PHP environment, and offers suggestions for improvement.

It does not do any kind of code auditing, but recommends loop in php configuration.

It can be installed by downloading it and then putting it in the folder that is accessible from the browser. Opening it on the browser (just like phpinfo() would show recommendations).

PHP Security before any changes to php.ini

PHP Security after changes to php.ini