Upgrade to Pro — share decks privately, control downloads, hide ads and more …

PHP Secure Configuration Checker

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Philipp Krenn Philipp Krenn
September 08, 2014
Programming
450
1

PHP Secure Configuration Checker

Short intro to Sektioneins' PCC

Avatar for Philipp Krenn

Philipp Krenn

September 08, 2014

More Decks by Philipp Krenn

See All by Philipp Krenn
Full-Text Search Explained
Avatar for Philipp Krenn xeraa
11
2.4k
360° Monitoring of Your Microservices
Avatar for Philipp Krenn xeraa
7
3.6k
Scale Your Metrics with Elasticsearch
Avatar for Philipp Krenn xeraa
4
180
YAML Considered Harmful
Avatar for Philipp Krenn xeraa
0
2.1k
Scale Your Elasticsearch Cluster
Avatar for Philipp Krenn xeraa
1
380
Hands-On ModSecurity and Logging
Avatar for Philipp Krenn xeraa
2
230
Centralized Logging Patterns
Avatar for Philipp Krenn xeraa
1
1.2k
Dashboards for Your Management with Kibana Canvas
Avatar for Philipp Krenn xeraa
1
520
Make Your Data FABulous
Avatar for Philipp Krenn xeraa
3
1.1k

Other Decks in Programming

See All in Programming
仕様書を書く前にハーネスを作る - Agent Native開発は「探索を速く、判定を固く」
Avatar for Gota gotalab555
4
1.7k
AIと壁打ちしながら進めるコスト管理
Avatar for Ryoma Fujiwara fufuhu
2
1.5k
関東Kaggler会_NVIDIA_Nemotron_コンペ_振り返り
Avatar for rick rick_ds
0
710
Jindong: Introducing Declarative Haptics in Compose Multiplatform
Avatar for HyunWoo Lee l2hyunwoo
0
130
PostgreSQL 18で考えるUUID主キー
Avatar for Kazuhiro Seo kazuhiro1982
0
500
複数の Claude Code が"放置"されてしまう問題をCLI ダッシュボードを自作して解決した話
Avatar for sumihiro3 sumihiro3
1
720
リアルな遅延を測る仕様
Avatar for kota-yata kota_yata
1
120
tsc.rip を支える技術 / Kyoto.なんか #8
Avatar for Susisu susisu
0
120
私のClaude Code活用法 （個人開発編） - PHPerKaigi mini #4（2026/08/24）
Avatar for panda_program panda_program
1
130
使いながら育てる Claude Code — 開発フローの1コマンド化 × 繰り返し指摘の自動仕組み化
Avatar for endo shiki shiki_kakaku
0
1.9k
AI Readyの正体はデータマネジメントだ メダリオン2.0の最前線
Avatar for freee freee
PRO
0
360
プロポーザルを書いてもらう
Avatar for pvcresin pvcresin
0
570

Featured

See All Featured
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
698
190k
Impact Scores and Hybrid Strategies: The future of link building
Avatar for Tamara Novitovic tamaranovitovic
0
420
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.3k
Amusing Abliteration
Avatar for ianozsvald ianozsvald
1
260
Information Architects: The Missing Link in Design Systems
Avatar for Michelle Chin soysaucechin
1
1.1k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.9k
30 Presentation Tips
Avatar for Ian Lurie portentint
PRO
1
370
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
Crafting Experiences
Avatar for Bethany Jepchumba bethany
1
260
Raft: Consensus for Rubyists
Avatar for Patrick Van Stee vanstee
141
7.6k
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
9
940
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.8k

Transcript

  1. PHP Secure Configuration Checker Philipp Krenn, @xeraa

  2. https://github.com/ sektioneins/pcc SektionEins (Suhoshin) PHP 5.4+ New BSD License

  3. Security Checks Critical: Fix this NOW Example: Register globals

  4. Security Checks High: You should really look at this Example:

    Allow URL fopen

  5. Security Checks Medium: This might be a problem Example: Display

    errors on

  6. Security Checks Low: Boring stuff Example: Execution time > 300s

  7. Security Checks Maybe: Not sure, check manually Example: Memory limit

    > 128MB

  8. Security Checks Comment: Just mentioning it Example: Upload max filesize

    is the default (8MB)

  9. Modes CLI Web

  10. Web Security 127.0.0.1 mtime < 2d

  11. How good / bad are the Ubuntu 14.04 defaults? nginx

    + PHP-FPM
  12. None

  13. Give It a Try $ git clone https://github.com/xeraa/ppc-test.git $ cd

    ppc-test/ $ vagrant up http://127.0.0.1:8080/phpconfigcheck-allow.php

  14. Conclusion: Simple but gets the job done

  15. Questions?