About the Author

Chris Shiflett

Hi, I'm Chris, a web developer and a founding member of Analog. I live and work in Brooklyn, NY.


Damien Seguy Catalogues phpinfo() Statistics

As I mentioned earlier, Damien Seguy has been compiling phpinfo() statistics. He just sent me an email with an update on his progress:

I just published the first part of a series of articles about PHP directives configurations. By gathering 11,000 phpinfos on the Internet, I managed to get an overview of what values are used when configuring PHP.

Here are some interesting statistics uncovered by his research:

  • register_globals is enabled 57% of the time.
  • magic_quotes_gpc is enabled 76% of the time.
  • display_errors is enabled 80% of the time.

You can find his full article at the following URL:

http://nexen.net/articles/dossier/php_configuration_statitstics.php

About This Post

Damien Seguy Catalogues phpinfo() Statistics was posted on Sat, 04 Nov 2006 at 00:58:13 GMT.

6 Comments

1. Tim B's GravatarTim B said:

Wouldn't these statistics, although interesting, be rather inaccurate and not give a reliable "picture" of the PHP community.

I would suggest that those who have register_globals, magic_quotes_gpc and display_errors all turned off are also more likely to not have their phpinfo() data exposed, meaning that the majority of results *would* have these enabled.

Anyway... that was my initial thought.

Sat, 04 Nov 2006 at 02:08:38 GMT Link


2. Chris Shiflett's GravatarChris Shiflett said:

As I mentioned in the earlier post, Adam said the same thing. It's certainly a valid point.

Damien's response was that the phpinfo() stats lined up with his version stats (obtained using an entirely different methodology), so that lends some credibility to these results.

Sat, 04 Nov 2006 at 02:23:21 GMT Link


3. streaky's Gravatarstreaky said:

Interesting he's not answered the real question that everybody is thinking.. i.e. the version numbers question.

It's the one that stands out as missing from the list to me.

Sat, 11 Nov 2006 at 14:49:38 GMT Link


4. Chris Shiflett's GravatarChris Shiflett said:

You might mean this:

http://shiflett.org/archive/239

As far as I know, he's been keeping up with version stats for quite some time now.

Sat, 11 Nov 2006 at 18:51:12 GMT Link


5. Caydel's GravatarCaydel said:

Thanks for passing this on - reading that has caused me to go turn phpinfo() off on my pages....

Wed, 22 Nov 2006 at 03:06:54 GMT Link


6. Ergo's GravatarErgo said:

Is it possible to read phpinfo() of any site?

As far as I know it is not possible. So it is not representative extract

Thu, 23 Nov 2006 at 18:07:07 GMT Link


Post A Comment

Personal Details and Comment

Style Guide

Line breaks are converted to paragraphs. Also use:

  • <a href="" title="">text</a>1
  • <em>text</em>
  • <blockquote><p>text</p></blockquote>
  • <code>2  <?php  if ($foo) {      $foo = TRUE;  }  ?></code>
  1. Note: <code> can be used inline (e.g. in paragraphs) or in a block as shown. Include whitespace and newlines in blocks.

Please enter Chris (my first name) below. This is a primitive spam prevention technique, and I apologize for the inconvenience.

Preview and Submit

Upcoming Talks

ConFoo

10 - 12 Mar 2010

At Hilton Montréal Bonaventure, Montréal, Canada.

South by Southwest

12 - 16 Mar 2010

At Austin Convention Center, Austin, Texas.

Dutch PHP Conference

10 - 12 Jun 2010

At TBD, Amsterdam, Netherlands.

O'Reilly Open Source Convention

19 - 23 Jul 2010

At Oregon Convention Center, Portland, Oregon.

New Comments

Chris Shiflett wrote:

Glad it helped, Niall!

Posted in Git on Snow Leopard
Niall Kelly wrote:

Having tried other methods without success and looked through plenty of bloated documentation, th...

Posted in Git on Snow Leopard
liukang wrote:

I have problem with this example. In my php.ini magic_quotes_gpc is off so i'm using only addsla...

Posted in addslashes() Versus mysql_real_escape_string()
RyanTheGreat wrote:

Well, I'm not Chris, but I will do my best to address the questions raised in the comments by Ian...

Posted in Security Corner: Cross-Site Request Forgeries
Chris Shiflett wrote:

Thanks for the kind words, Simon. I'm glad you liked the tutorial. In case it's helpful, here'...

Posted in Webstock

Browse Comments


Work and Books

Analog Essential PHP Security HTTP Developer's Handbook