PCI COMPLIANCE: extras/curltest.php

[Sir Paolo]

I have failed my latest PCI compliance scan because of a zen cart file in the extras folder named curltest.php

Here is the PCI COMPANY'S VERBIAGE: "A PHP script (extras/curltest.php) can be used to disclose the contents of local files."

My question is, can I remove this file without messing up the rest of Zen Cart? Does this file have real significance in the program or not?

THanks!

[Kim]

All of the files in the extras directory can be removed from your web space. I would keep a copy of the test scripts on your harddrive as backup in case you need to use them at some point.

[Sir Paolo]

Excellent. Thank you for the prompt answer. It is much appreciated.

[DrByte]

FYI -- that's why the matter was posted in a forum-wide announcement a few months ago: http://www.zen-cart.com/forum/showthread.php?t=142784