Server Security Audit

PHP Version Information

PHP Version: 8.4.21

OK: PHP version is current

Open Base Dir Protection

PROTECTED: open_basedir is configured

/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder

PHP file access is restricted to the directories listed above.

Dangerous Functions Analysis

High Risk

Function	Status
exec()	DISABLED
shell_exec()	DISABLED
system()	DISABLED
passthru()	DISABLED
popen()	DISABLED
proc_open()	DISABLED
pcntl_exec()	DISABLED

Medium Risk

Function	Status
eval()	DISABLED
assert()	ENABLED
create_function()	DISABLED
include()	DISABLED
require()	DISABLED

File Operations

Function	Status
file_get_contents()	ENABLED
file_put_contents()	ENABLED
fopen()	ENABLED
readfile()	ENABLED
unlink()	ENABLED

Information Disclosure

Function	Status
phpinfo()	ENABLED
posix_getpwuid()	DISABLED
getenv()	ENABLED
get_current_user()	ENABLED

Disabled Functions List

exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname

PHP Security Settings

Setting	Current Value	Recommended	Status
display_errors	1	0	INSECURE
expose_php	Empty	Off	INSECURE
allow_url_fopen	1	Off	INSECURE
allow_url_include	Empty	Off	INSECURE
register_globals	Not Set	Off	INSECURE
magic_quotes_gpc	Not Set	Off	INSECURE
session.cookie_httponly	Empty	1	INSECURE
session.cookie_secure	0	1	INSECURE
session.use_strict_mode	0	1	INSECURE

File System Access Tests

Common System File Access Tests

Testing if PHP can read sensitive system files outside the user directory:

Warning: file_exists(): open_basedir restriction in effect. File(/etc/passwd) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/passwd - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/shadow) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/shadow - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/hosts) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/hosts - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/apache2/apache2.conf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/apache2/apache2.conf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/nginx/nginx.conf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/nginx/nginx.conf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/my.cnf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/my.cnf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/etc/mysql/my.cnf) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /etc/mysql/my.cnf - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/var/log/apache2/error.log) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /var/log/apache2/error.log - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/var/log/nginx/error.log) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /var/log/nginx/error.log - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/proc/version) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /proc/version - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/root/.bash_history) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /root/.bash_history - File does not exist or access denied

Warning: file_exists(): open_basedir restriction in effect. File(/home) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 247

✗ /home - File does not exist or access denied

Write Access Tests

Testing if PHP can write to directories outside the user directory:

✓ /tmp - Directory is writable

✓ /var/tmp - Directory is writable

Warning: is_writable(): open_basedir restriction in effect. File(/var/www) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /var/www - Directory is not writable

Warning: is_writable(): open_basedir restriction in effect. File(/etc) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /etc - Directory is not writable

Warning: is_writable(): open_basedir restriction in effect. File(/root) is not within the allowed path(s): (/home/t91/:/tmp/:/var/tmp/:/opt/alt/php84/usr/share/pear/:/dev/urandom:/usr/local/php84/lib/:/usr/local/php84/lib/:/usr/local/lib/php/:/var/www/omnicoder) in /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php on line 258

✗ /root - Directory is not writable

Directory Listing Tests - /tmp and /var/tmp

Attempting to list files in temporary directories:

/tmp

✓ Directory is accessible and readable

Files found: 1484

[FILE] (10 bytes) [R-] .webcron.lock
[FILE] (0 bytes) [R-] _ctest.db
[FILE] (120 bytes) [R-] _savebug.log
[FILE] (58 bytes) [--] adminer.invalid
[FILE] (59 bytes) [--] adminer.invalid-0037d3bc7910b3720419fa6e34a006a3
[FILE] (84 bytes) [--] adminer.invalid-04d67275633821a3a1a13f1a978ca2c2
[FILE] (58 bytes) [--] adminer.invalid-0b55a8e0c6e6e67cf414838fea70f227
[FILE] (58 bytes) [--] adminer.invalid-1973aeb408cc78bdf45924f2a356246d
[FILE] (84 bytes) [--] adminer.invalid-1e1d1bce4a463f4dd1969cba7f47d608
[FILE] (58 bytes) [--] adminer.invalid-23520778e78dd695503af721bf76fb4b
[FILE] (59 bytes) [--] adminer.invalid-37e19401dd40a1c5d1f0ca1693f5e2c0
[FILE] (60 bytes) [--] adminer.invalid-398d051602d0413c70f13950f74e98bf
[FILE] (137 bytes) [--] adminer.invalid-3f00ad25d2faaa78aa2f1e88fe8d9202
[FILE] (59 bytes) [--] adminer.invalid-4557b3fba9ff7d0f8328795633e1cc19
[FILE] (59 bytes) [--] adminer.invalid-496605642bf3c76133fe8a407773d0ea
[FILE] (60 bytes) [--] adminer.invalid-4c88c1d5d9c9ef896afa34de3acde2d1
[FILE] (58 bytes) [--] adminer.invalid-513f3f5bc93ec5a25169638f8d79e7c6
[FILE] (58 bytes) [--] adminer.invalid-575db0eae08306c462595a35240d91f8
[FILE] (59 bytes) [--] adminer.invalid-5f2e199829a57b639cd2e46b7ec8ded2
[FILE] (84 bytes) [--] adminer.invalid-64d3ffb6eea866c1e4f783b12dffb2b3
[FILE] (82 bytes) [--] adminer.invalid-65c0025d56676afc7727abee247b1c10
[FILE] (84 bytes) [--] adminer.invalid-6deb6f5caeba77fe9ac3164edfcc8938
[FILE] (60 bytes) [--] adminer.invalid-71073bd0ff5be7b4067bdb4c1849c394
[FILE] (59 bytes) [--] adminer.invalid-768b8abc4c65b6e7bd76451b2b24da3c
[FILE] (60 bytes) [--] adminer.invalid-77a655961b16d25ec0f4eb8578302e5d
[FILE] (58 bytes) [--] adminer.invalid-901c51aa625e8516df837da673b1a174
[FILE] (58 bytes) [--] adminer.invalid-a495cc5f7ed1745c0989fd3a73a6bc64
[FILE] (82 bytes) [--] adminer.invalid-b0d256780503e394cce5b5381d031b71
[FILE] (59 bytes) [--] adminer.invalid-b7222902043e8555553d8a257cb2851d
[FILE] (84 bytes) [--] adminer.invalid-bd2eeb32226c643b71c209052b236443
[FILE] (59 bytes) [--] adminer.invalid-c551574e4c8ffd8049099f24bf322576
[FILE] (58 bytes) [--] adminer.invalid-ca5fec09be9bb6372e451cd0c69d9cfa
[FILE] (59 bytes) [--] adminer.invalid-cc4812810f32e6f039a44fd067ffa4e2
[FILE] (84 bytes) [--] adminer.invalid-cce289be06b1d1fd88231581bfd84b93
[FILE] (60 bytes) [--] adminer.invalid-da261b66916b7a7099eca3409c0173e3
[FILE] (59 bytes) [--] adminer.invalid-db0c2b82dcce5bd5ccd95c3f8e91cd89
[FILE] (58 bytes) [--] adminer.invalid-e7841879876d6bba7b7ece0d07f45ee5
[DIR]  [R-] ap_sessions
[FILE] (12,288 bytes) [R-] bharat-terminal-market-cache.sqlite
[FILE] (131 bytes) [R-] bharat-terminal-nse-cookie.txt
[FILE] (1,564 bytes) [R-] bizdash_errors.log
[FILE] (0 bytes) [--] bk7mdfta1a6knj4r3RDlC
[FILE] (0 bytes) [--] bk9pgu071ou1m30nwyYgX
[FILE] (0 bytes) [--] bkij8an6tlfcgqfnqmhWE
[FILE] (7 bytes) [R-] bx_lock_polling
[FILE] (98 bytes) [R-] ccash_av_cfb727f8a7badc9e2971362ea51619bb.json
[FILE] (680 bytes) [R-] cg_7f10e03a80197c8ccfda197fb93a48d6.json
[FILE] (6,657 bytes) [R-] cg_a04ca4198fc8f0c6c83efbcf414d6f36.json
[FILE] (13,493 bytes) [R-] cg_d95c10b879361383d182ecdc15e07841.json
[FILE] (83 bytes) [R-] dbg_path.txt

... and 1432 more files (limited to first 50)

Attempting to Read Files in /tmp

✓ Successfully read: .webcron.lock (10 bytes read)

Preview: 1785233647

✓ Successfully read: _ctest.db (0 bytes read)

Preview:

✓ Successfully read: _savebug.log (120 bytes read)

Preview: rawlen=66 payload={"name":"Snap Hero","data":{"gender":"female","bodyType":"slim"}} name='Snap Hero'...

✗ Cannot read: adminer.invalid (Permission denied)

✗ Cannot read: adminer.invalid-0037d3bc7910b3720419fa6e34a006a3 (Permission denied)

✗ Cannot read: adminer.invalid-04d67275633821a3a1a13f1a978ca2c2 (Permission denied)

✗ Cannot read: adminer.invalid-0b55a8e0c6e6e67cf414838fea70f227 (Permission denied)

✗ Cannot read: adminer.invalid-1973aeb408cc78bdf45924f2a356246d (Permission denied)

✗ Cannot read: adminer.invalid-1e1d1bce4a463f4dd1969cba7f47d608 (Permission denied)

✗ Cannot read: adminer.invalid-23520778e78dd695503af721bf76fb4b (Permission denied)

Summary: Successfully read 3 out of 10 tested files

/var/tmp

✓ Directory is accessible and readable

Files found: 2

Attempting to Read Files in /var/tmp

Current Directory Information

Current Working Directory: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html
Document Root: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html
Script Filename: /home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html/index.php
Current User: root
User ID: 0
Group ID: 0

Server Information

Parameter	Value
Server Software	Apache/2
Server Name	surround-flash-9d7a403c-91.app.omni-coder.com
Server Protocol	HTTP/1.1
PHP SAPI	fpm-fcgi
Operating System	Linux
Server Admin	webmaster@surround-flash-9d7a403c-91.app.omni-coder.com
Document Root	/home/t91/domains/surround-flash-9d7a403c-91.app.omni-coder.com/public_html

Loaded PHP Extensions

• Core

• FFI

• PDO

• Phar

• Reflection

• SPL

• SimpleXML

• bcmath

• calendar

• cgi-fcgi

• ctype

• curl

• date

• dom

• exif

• fileinfo

• filter

• ftp

• gd

• gettext

• hash

• iconv

• intl

• json

• libxml

• mbstring

• mysqli

• mysqlnd

• openssl

• pcre

• pdo_mysql

• pdo_sqlite

• posix

• random

• session

• shmop

• soap

• sockets

• sodium

• sqlite3

• standard

• sysvmsg

• sysvsem

• sysvshm

• tokenizer

• xml

• xmlreader

• xmlwriter

• xsl

• zip

• zlib

Security Summary

Security issues detected

Error Display Enabled

Errors are displayed to users, which may leak sensitive information.