add php-info.php file and restrict to local access

whatsupskip · Jun 23, 2016 · 8465db4 · 8465db4
1 parent 414a9f6
commit 8465db4
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 7 deletions.
diff --git a/.htaccess b/.htaccess
@@ -198,4 +198,13 @@ AddDefaultCharset utf-8
         Require all denied
     </IfModule>
 
-</FilesMatch>
+</FilesMatch>
+
+# protect phpinfo, only allow localhost and local network access
+<Files php-info.php>
+	Order Deny,Allow
+	Deny from all
+	Allow from 10
+	Allow from 172
+	Allow from 192
+</Files>
diff --git a/index.php b/index.php
@@ -43,16 +43,14 @@
 
     $mqtt = false;
 
-    # Check MySQL PHP modules are loddee
+    # Check MySQL PHP modules are loaded
     if (!extension_loaded('mysql') && !extension_loaded('mysqli')){
-       echo "php mysql extension(s) not loaded. <br>";
-       echo "Your PHP installation appears to be missing the MySQL extension which is required by Emoncms."; die;
+       echo "Your PHP installation appears to be missing the MySQL extension(s) which are required by Emoncms. <br> See /php-info.php (restricted to local access)"; die;
     }
 
-    # Check Gettext PHP  module is loded
+    # Check Gettext PHP  module is loaded
     if (!extension_loaded('gettext')){
-       echo "php gettext extension(s) not loaded. <br>";
-       echo "Your PHP installation appears to be missing the gettext extension which is required by Emoncms."; die;
+       echo "Your PHP installation appears to be missing the gettext extension which is required by Emoncms. <br> See /php-info.php (restricted to local access)"; die;
     }
 
     $mysqli = @new mysqli($server,$username,$password,$database,$port);

diff --git a/php-info.php b/php-info.php
@@ -0,0 +1,3 @@
+<?php
+# protected and only access from localhost & local network (see .htaccess)
+phpinfo(); ?>