ALERT - function within blacklist called: phpinfo()

[Toffmonster]

Hello.

I tried checking PHP Information through my forum (phpbb3), but it gave me a blank page (it was working normally before PHP upgrade).

I checked my cPanel Error Logs, and found the error
ALERT - function within blacklist called: phpinfo()
there.

I have Intermediate PHP configuration.

I suppose this shouldn't be happening, or is this function now blacklisted even in the intermediate configuration?

Thank you.

 

[Christopher]

You can check it in cPanel. It is under "PHP Configuration"

 

[Toffmonster]

The problem is, I don't have "PHP Configuration" in my cPanel:

(I suppose it should've been under Software / Services).

Also when I click on "Site Software" I got this:
"No cPAddons configuration found. Please contact your host and ask that they configure cPAddons."

 

[Christopher]

Is there anything specific about the php configuration you need to know?

 

[Toffmonster]

Not really, I wanted to browse through it after the update to see what's changed, nothing in particular. I just want everything to work as it should. :| It was working before, I could check that information, and now I can't, so I'm notifying you about this, because I think it's not working the way it should be.

 

[Christopher]

What is making you think that?

 

[Toffmonster]

The fact that it was working before PHP upgrade to version 5.2.6 here, and it was working on any other hosting I was before as well.

phpinfo() must not be blacklisted in the first place, I am on Intermediate for a reason, and if there were any changes in Intermediate PHP Configuration, then could you, please, describe them to me? If that function is blacklisted now in Intermediate then I should request a change for Advanced PHP configuration.

And secondly, you said it yourself that I must be able to see PHP Configuration info in my cPanel, and I can't, because it's not there. And now you ask me why I think something's wrong.

Could you, please, make it so I was able to see PHP Configuration information again in both my cPanel and using phpinfo(), or if it's not possible, at least in cPanel?
Thank you.

 

[Toffmonster]

Hello.
I still don't have "PHP Configuration" option in my cPanel, phpinfo() is still blacklisted, and "Site Software" still gives me "No cPAddons configuration found. Please contact your host and ask that they configure cPAddons." message.
Any update?

 

[Corey]

We took phpinfo off the blacklist for now until we have a better solution.

cPAddons are depreciated, please use Fantastico instead.

-Corey

 

[Toffmonster]

Thank you very much for your reply.

So it seems you'd like to disable this function, even though phpinfo() page is not being indexed by search engines? Or do you think that it's better not to give your users full information about your server as well for your own security? I mean, I can understand that, I'm just curious about why this sudden blacklisting took place. But thank you for unblocking it for now.

As for Fantastico, will do, thank you for clarifying this for me.

 

[Corey]

It makes it easier for people to find holes in our security if they have a readily available list of all the configuration settings.

-Corey