{"id":452,"date":"2010-12-30T00:30:30","date_gmt":"2010-12-29T23:30:30","guid":{"rendered":"https:\/\/d-mueller.de\/blog\/?p=452"},"modified":"2010-12-30T00:30:30","modified_gmt":"2010-12-29T23:30:30","slug":"niemand-soll-wissen-dass-die-webseite-mit-php-laeuft","status":"publish","type":"post","link":"https:\/\/d-mueller.de\/blog\/niemand-soll-wissen-dass-die-webseite-mit-php-laeuft\/","title":{"rendered":"Niemand soll wissen, dass die Webseite mit PHP l\u00e4uft!"},"content":{"rendered":"<p>Kleines Easteregg: Einfach mal an eine beliebige URL <\/p>\n<pre data-enlighter-language=\"enlighter\" class=\"EnlighterJSRAW\">?=PHPE9568F36-D428-11d2-A769-00AA001ACF42<\/pre>\n<p> anh\u00e4ngen, bei mir sieht das <a href=\"https:\/\/d-mueller.de\/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42\">so aus<\/a>.<\/p>\n<p>Toll, oder? Weiterhin verraten die Response-Headers ungeniert, was los ist:<br \/>\n<div id=\"attachment_454\" style=\"width: 482px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeon.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-454\" src=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeon.png\" alt=\"Response mit expose on\" title=\"Response mit expose on\" width=\"472\" height=\"127\" class=\"size-full wp-image-454\" srcset=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeon.png 472w, https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeon-300x80.png 300w\" sizes=\"auto, (max-width: 472px) 100vw, 472px\" \/><\/a><p id=\"caption-attachment-454\" class=\"wp-caption-text\">Response mit expose on<\/p><\/div>\n<\/p>\n<p>Wenn in der php.ini nun die Einstellung <a href=\"http:\/\/de2.php.net\/manual\/en\/ini.core.php#ini.expose-php\">expose_php = Off<\/a> get\u00e4tigt wird, klappt weder das &#8222;Easteregg&#8220; mit dem PHP-Bild, noch kriegt man \u00fcber die Response-Header die PHP-Version mitgeteilt:<br \/>\n<div id=\"attachment_453\" style=\"width: 417px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeoff.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-453\" src=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeoff.png\" alt=\"Response mit expose off\" title=\"Response mit expose off\" width=\"407\" height=\"115\" class=\"size-full wp-image-453\" srcset=\"https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeoff.png 407w, https:\/\/d-mueller.de\/blog\/wp-content\/uploads\/2010\/12\/response_exposeoff-300x84.png 300w\" sizes=\"auto, (max-width: 407px) 100vw, 407px\" \/><\/a><p id=\"caption-attachment-453\" class=\"wp-caption-text\">Response mit expose off<\/p><\/div>\n<\/p>\n<p>Wenn man nun noch die <i>.php<\/i> Extension &#8222;weg-modrewrite-d&#8220;, m\u00fcsst ihr euch nicht mehr sch\u00e4men, dass ihr PHP verwendet. Au\u00dfer nat\u00fcrlich, <a href=\"http:\/\/php.net\/manual\/de\/errorfunc.configuration.php\">display_errors<\/a> ist an und offenbart all eure Programmierfehler ;).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kleines Easteregg: Einfach mal an eine beliebige URL ?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 anh\u00e4ngen, bei mir sieht das so aus. Toll, oder? Weiterhin verraten die Response-Headers ungeniert, was los ist: Wenn in der php.ini nun die Einstellung expose_php = Off get\u00e4tigt wird, klappt weder &hellip; <a href=\"https:\/\/d-mueller.de\/blog\/niemand-soll-wissen-dass-die-webseite-mit-php-laeuft\/\">Weiterlesen <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,8,3],"tags":[],"class_list":["post-452","post","type-post","status-publish","format-standard","hentry","category-php","category-quicktips","category-webdev"],"_links":{"self":[{"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/posts\/452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/comments?post=452"}],"version-history":[{"count":0,"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/posts\/452\/revisions"}],"wp:attachment":[{"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/media?parent=452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/categories?post=452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/d-mueller.de\/blog\/wp-json\/wp\/v2\/tags?post=452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}