Quick question about a security issue.

[aceproductsusa]

My hosting company, GoDaddy, has scanned my site with their site scanner and has come up with several issues. I want to try and work through these but I am not sure about most of them so I figured I come here and see if there are solutions to any of them. I will just do these 1 by 1 starting with the critical ones, once this one is solved, I'll post the next one.

Description:

Many PHP installation tutorials instruct the user to create a PHP file
that calls the PHP function 'phpinfo()' for debugging purposes.
Various PHP applications may also include such a file. By accessing such a file, a remote attacker can discover a large amount of information about the remote web server, including :

- The username of the user who installed php and if they
are a SUDO user.

- The IP address of the host.

- The version of the operating system.

- The web server version.

- The root directory of the web server.

- Configuration information about the remote PHP
installation.

Solution:

Remove the affected file(s)

If I am understanding this correctly, it is asking me to remove the phpinfo file. Is this correct and is this ok to do? Any insight would be awesome.

[Kim]

If I am understanding this correctly, it is asking me to remove the phpinfo file. Is this correct and is this ok to do? Any insight would be awesome.

Yes, you can remove that file.

[aceproductsusa]

Awesome, thank you Kim. This was 1 of 2 critical issues, but after reading the other issue, it was the same one again. All the other issues are just informational issues and don't look like anything serious. Thanks again!