new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

php_configuration/general

2 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

PHP general security settings

Set doc_root = /path/DocumentRoot/PHP-scripts/, open_basedir = /path/DocumentRoot/PHP-scripts/, include_path = /path/PHP-pear/, extension_dir = /path/PHP-extensions/, mime_magic.magicfile = /path/PHP-magic.mime, allow_url_fopen = Off, allow_url_include = Off, variables_order = GPCS, allow_webdav_methods = Off, session.gc_maxlifetime = 600.

allow_url_fopen and allow_url_include prevent escalation attacks

Setting allow_url_fopen and allow_url_include to Off prevents Local File Inclusion (LFI) attacks from being easily escalated to Remote File Inclusion (RFI) attacks.

Give your agent this brain