Exposed Files
phpinfo() and server-status: the debug pages attackers grep for
A forgotten phpinfo.php or an open server-status page is a free reconnaissance gift. Bots request them by name on every site. Here is what they reveal and how to close them.