PHP WEBSITE SECURITY QUIZ

The memory_limit is only applicable if _______ is enabled when you configure PHP. Fill in the blank.

-memory-limit

-enable-memory-limit

–enable-memory-limit

–enable-limit

TRUE ANSWER : ?
YOUR ANSWER : ?

Which one of the following statements should be used to disable the use of two classes administrator and janitor?

disable_classes = “administrator, janitor”

disable_class = class “administrator”, class “janitor”

disable_classes = class administrator, class janitor

disable_classes = class “administrator”, class “janitor”

TRUE ANSWER : ?
YOUR ANSWER : ?

Which directive determines which degree of server details is provided if the ServerSignature directive is enabled?

ServerAddons

ServerTokens

ServerExtra

ServerDetails

TRUE ANSWER : ?
YOUR ANSWER : ?

The developers of PHP deprecated the safe mode feature as of which PHP version.

PHP 5.2.0

PHP 5.3.1

PHP 5.1.0

PHP 5.3.0

TRUE ANSWER : ?
YOUR ANSWER : ?

Say I want to change the extension of a PHP file, which of the following statements should I edit to change from .php to .html in the httpd.conf file?

AddType application/x-httpd-asp .asp

AddType application/x-httpd-asp .php

AddType application/x-httpd-php .asp

AddType application/x-httpd-php .php

TRUE ANSWER : ?
YOUR ANSWER : ?

Which Apache directive outputs Apache’s server version, server name, port and compile-in modules?

ServerName

ServerDetails

ServerSignature

ServerInfo

TRUE ANSWER : ?
YOUR ANSWER : ?

Which one of the following statements should be used to disable just the fopen(), and file() functions?

functions_disable = fopen, file

functions_disable = fopen(), file()

disable_functions = fopen(), file()

disable_functions = fopen, file

TRUE ANSWER : ?
YOUR ANSWER : ?

Suppose all web material is located within the directory /home/www. To prevent users from viewing and manipulating files such as /etc/password, which one of the following statements should you use?

open_basedir = “/home/www/”

open_dir = /home/www/

open_dir = “/home/www/”

open_basedir = /home/www/

TRUE ANSWER : ?
YOUR ANSWER : ?

Which directive should we disable to obscure the fact that PHP is being used on our server?

expose_php

show_php

print_php

info_php

TRUE ANSWER : ?
YOUR ANSWER : ?

What is the default value of max_execution_time directive? This directive specifies how many seconds a script can execute before being terminated.

40

30

10

20

TRUE ANSWER : ?
YOUR ANSWER : ?

↑