expose_php, Easter Eggs, and .htaccess  [ Screenshot: PHP Logo ]
A reader recently brought to my attention a reported
vulnerability on servers running PHP. It’s been known about for
eons, but it’s new to me and it involves easter eggs in PHP so I
thought it would be fun to share a quick post about what it is
and how to prevent leakage of sensitive information about your
server.  What it is..  Here’s the scoop according to the Open
Source Vulnerability DataBase:   Couldn’t have said it better
myself. Basically if you’re running PHP it may be possible for
someone to discover the PHP-version and other sensitive
information. It’s not “threat level midnight” or anything like
that, but certainly worth a few moments to lock it down: another
layer of protection to increase the security of your website(s).
How it works..  On servers running PHP, visit any page, remove
the trailing slash, and append any of the following query-
strings:   If the vulnerability is present, requests made with
these query-strings results in