Server Security Audit

PHP Version Information

PHP Version: 8.4.21

OK: PHP version is current

Open Base Dir Protection

PROTECTED: open_basedir is configured

/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder

PHP file access is restricted to the directories listed above.

Dangerous Functions Analysis

High Risk

Function	Status
exec()	DISABLED
shell_exec()	DISABLED
system()	DISABLED
passthru()	DISABLED
popen()	DISABLED
proc_open()	DISABLED
pcntl_exec()	DISABLED

Medium Risk

Function	Status
eval()	DISABLED
assert()	ENABLED
create_function()	DISABLED
include()	DISABLED
require()	DISABLED

File Operations

Function	Status
file_get_contents()	ENABLED
file_put_contents()	ENABLED
fopen()	ENABLED
readfile()	ENABLED
unlink()	ENABLED

Information Disclosure

Function	Status
phpinfo()	ENABLED
posix_getpwuid()	DISABLED
getenv()	ENABLED
get_current_user()	ENABLED

Disabled Functions List

exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname

PHP Security Settings

Setting	Current Value	Recommended	Status
display_errors	1	0	INSECURE
expose_php	Empty	Off	INSECURE
allow_url_fopen	1	Off	INSECURE
allow_url_include	Empty	Off	INSECURE
register_globals	Not Set	Off	INSECURE
magic_quotes_gpc	Not Set	Off	INSECURE
session.cookie_httponly	Empty	1	INSECURE
session.cookie_secure	0	1	INSECURE
session.use_strict_mode	0	1	INSECURE

File System Access Tests

Common System File Access Tests

Testing if PHP can read sensitive system files outside the user directory:

Warning: file_exists(): open_basedir restriction in effect. File(/etc/passwd) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/passwd - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/shadow) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/shadow - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/hosts) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/hosts - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/apache2/apache2.conf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/apache2/apache2.conf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/nginx/nginx.conf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/nginx/nginx.conf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/my.cnf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/my.cnf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/mysql/my.cnf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/mysql/my.cnf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/var/log/apache2/error.log) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /var/log/apache2/error.log - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/var/log/nginx/error.log) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /var/log/nginx/error.log - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/proc/version) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /proc/version - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/root/.bash_history) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /root/.bash_history - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/home) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /home - File does not exist or access denied

Write Access Tests

Testing if PHP can write to directories outside the user directory:

✓ /tmp - Directory is writable

✓ /var/tmp - Directory is writable

Warning: is_writable(): open_basedir restriction in effect. File(/var/www) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /var/www - Directory is not writable

Warning: is_writable(): open_basedir restriction in effect. File(/etc) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /etc - Directory is not writable

Warning: is_writable(): open_basedir restriction in effect. File(/root) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /root - Directory is not writable

Directory Listing Tests - /tmp and /var/tmp

Attempting to list files in temporary directories:

/tmp

✓ Directory is accessible and readable

Files found: 99

[FILE] (10 bytes) [R-] .webcron.lock
[DIR]  [R-] ap_sessions
[FILE] (98 bytes) [R-] ccash_av_cfb727f8a7badc9e2971362ea51619bb.json
[FILE] (187 bytes) [R-] cg_7f10e03a80197c8ccfda197fb93a48d6.json
[FILE] (6,844 bytes) [R-] cg_a04ca4198fc8f0c6c83efbcf414d6f36.json
[FILE] (25 bytes) [R-] corem_taux_20261012.lock
[FILE] (25 bytes) [R-] corem_taux_20261013.lock
[FILE] (396 bytes) [R-] eonrail-errors.log
[FILE] (0 bytes) [--] hub_e6cg919j1kokaCWe8Sp
[FILE] (13 bytes) [R-] moha-ltc-rate.json
[FILE] (12 bytes) [R-] niutrip_rl_090ec23c603a714eb2ce4172c9d4bb81.json
[FILE] (23 bytes) [R-] niutrip_rl_bc0d1c66ade9ad1352d7cf600fc24e0b.json
[DIR]  [R-] school_sessions_d676bd4f2c8fb4be2cc7079dcc4395cc
[FILE] (0 bytes) [--] sess_00942f738ef122c5c8722071443b673c
[FILE] (0 bytes) [--] sess_060ba7df9b390981040f160a8ee25a90
[FILE] (0 bytes) [--] sess_0627fbb197ef700c05380d174a3cb83e
[FILE] (0 bytes) [--] sess_08e1b8431010a9b31b6cf14e6fc5e31d
[FILE] (0 bytes) [--] sess_0b4c018d21db452c8aaa93e8900b926f
[FILE] (0 bytes) [--] sess_15fdd8673b7274a68f8196f163579a34
[FILE] (0 bytes) [--] sess_241afe0ebb6b14fab995001917399bb1
[FILE] (0 bytes) [--] sess_2f782a8feceb92c1607b812fdb7bffa7
[FILE] (0 bytes) [--] sess_30cdb6ac4a22b12fe70a0e7037fbe7ee
[FILE] (0 bytes) [--] sess_30e1a1d275e70840cb9d00274871f12e
[FILE] (0 bytes) [--] sess_31af45def28fe12e936deb63fb99b3ad
[FILE] (0 bytes) [--] sess_31d666569c97f3af4f4c7949080b50c5
[FILE] (0 bytes) [--] sess_354ae8e4e0504be0391921d42bfa17f8
[FILE] (0 bytes) [--] sess_39bcccea6555c7a076c51095a3188ad5
[FILE] (0 bytes) [--] sess_3ce8ff68f9044f9acee37cdb026382a7
[FILE] (0 bytes) [--] sess_3eacfecd2b626bbb8431d3a3947e688a
[FILE] (0 bytes) [--] sess_42db689c4e4697cf12c8b4a567c523cd
[FILE] (0 bytes) [--] sess_4b0137064f0746b88e14b048d60e119a
[FILE] (0 bytes) [--] sess_4db597107a5d4cf5fcd06fa56fbb03be
[FILE] (0 bytes) [--] sess_552e30118d6ee485c0ed44ac15b8d44a
[FILE] (0 bytes) [--] sess_59599b85182f4f281ae2586838508d7f
[FILE] (0 bytes) [--] sess_626b84ab87a680d4c62dc0a5763e578f
[FILE] (0 bytes) [--] sess_64dd5109ffaffe5ecb1ba84976a7436d
[FILE] (0 bytes) [--] sess_666ea75694b7100ad010645720b15ccb
[FILE] (0 bytes) [--] sess_696404e48d10c8c85d31777fab7631f4
[FILE] (0 bytes) [--] sess_6bab81f69e49c42247637e29b6181203
[FILE] (0 bytes) [--] sess_6dd5b0ef74f99c86671c74f8ea33c0d5
[FILE] (0 bytes) [--] sess_6df5b7f4199d4026547c156eb988f57b
[FILE] (0 bytes) [--] sess_72c5f259efee0c648d752746efb485f8
[FILE] (0 bytes) [--] sess_7ba3c2c80ca177dcff09bf8a2b0d6ecb
[FILE] (0 bytes) [--] sess_7bb1b761ed6a4fa9f8a286749d7422c9
[FILE] (0 bytes) [--] sess_7f58fb783dfac3f3cbe76c053d98ffc1
[FILE] (0 bytes) [--] sess_7ffcef332d544bfd61875a44504a5089
[FILE] (0 bytes) [--] sess_83e59ec3c26411e9f6619fbf85ff532c
[FILE] (0 bytes) [--] sess_84a94109741c177081b0ffa5b4ce58dc
[FILE] (0 bytes) [--] sess_8f46b5c31e7fd58460bceb1315f91660
[FILE] (0 bytes) [--] sess_923943d590bde62ae2d3f8575f277444

... and 47 more files (limited to first 50)

Attempting to Read Files in /tmp

✓ Successfully read: .webcron.lock (10 bytes read)

Preview: 1791952368

✓ Successfully read: ccash_av_cfb727f8a7badc9e2971362ea51619bb.json (98 bytes read)

Preview: {"ok":true,"http_code":200,"latency_ms":80,"rate":1322.87216871,"refreshed":"2026-10-12 17:52:55"}

✓ Successfully read: cg_7f10e03a80197c8ccfda197fb93a48d6.json (187 bytes read)

Preview: {"status":{"error_code":429,"error_message":"You've exceeded the Rate Limit. Please visit https://ww...

✓ Successfully read: cg_a04ca4198fc8f0c6c83efbcf414d6f36.json (200 bytes read)

Preview: [{"id":"bitcoin","symbol":"btc","name":"Bitcoin","image":"https://coin-images.coingecko.com/coins/im...

✓ Successfully read: corem_taux_20261012.lock (25 bytes read)

Preview: 2026-10-12T05:58:39-04:00

✓ Successfully read: corem_taux_20261013.lock (25 bytes read)

Preview: 2026-10-13T00:00:03-04:00

✓ Successfully read: eonrail-errors.log (200 bytes read)

Preview: [14-Oct-2026 00:50:32 America/New_York] PHP Warning:  Trying to access array offset on int in /home/...

✗ Cannot read: hub_e6cg919j1kokaCWe8Sp (Permission denied)

✓ Successfully read: moha-ltc-rate.json (13 bytes read)

Preview: {"usd":61.85}

✓ Successfully read: niutrip_rl_090ec23c603a714eb2ce4172c9d4bb81.json (12 bytes read)

Preview: [1791849821]

Summary: Successfully read 9 out of 10 tested files

/var/tmp

✓ Directory is accessible and readable

Files found: 2

Attempting to Read Files in /var/tmp

Current Directory Information

Current Working Directory: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html
Document Root: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html
Script Filename: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php
Current User: root
User ID: 0
Group ID: 0

Server Information

Parameter	Value
Server Software	Apache/2
Server Name	surround-flash-9d7a403c-91.app.omni-coder.com
Server Protocol	HTTP/1.1
PHP SAPI	fpm-fcgi
Operating System	Linux
Server Admin	webmaster@localhost
Document Root	/home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html

Loaded PHP Extensions

• Core

• FFI

• PDO

• Phar

• Reflection

• SPL

• SimpleXML

• bcmath

• calendar

• cgi-fcgi

• ctype

• curl

• date

• dom

• exif

• fileinfo

• filter

• ftp

• gd

• gettext

• hash

• iconv

• intl

• json

• libxml

• mbstring

• mysqli

• mysqlnd

• openssl

• pcre

• pdo_mysql

• pdo_sqlite

• posix

• random

• session

• shmop

• soap

• sockets

• sodium

• sqlite3

• standard

• sysvmsg

• sysvsem

• sysvshm

• tokenizer

• xml

• xmlreader

• xmlwriter

• xsl

• zip

• zlib

Security Summary

Security issues detected

Error Display Enabled

Errors are displayed to users, which may leak sensitive information.