1 ### WHAT IS PHPSECINFO?
2 PHPSecInfo is a PHP environment security auditing tool modeled after the
3 phpsecinfo() function. From a single function call, PHPSecInfo runs a
4 series of tests on your PHP environment to identify potential security
5 issues and offer suggestions. It can be useful as part of a multilayered
9 #### WHAT IS PHPSECINFO NOT?
10 * It is not a replacement for secure coding practices
11 * It does not audit PHP code
12 * It is not comprehensive test for either your hosting environment
13 or your web application
14 * It is not the "final word." PHPSecInfo identifies *potential* problems
15 and offers suggestions for improvement. Your environment may _require_
16 certain settings that trigger cautions or warnings.
18 WWW: http://phpsec.org/projects/phpsecinfo/