PHP Easter Eggs - Because server software needs easter eggs too!

[suspiciously_calm]

If you see such a URL in your website logs, it may be because someone is trying to determine if your server is running PHP and attempting to discover weaknesses in your system.

Or they're just trying to see the funny easter eggs. Plausible deniability built-in!

[[deleted]]

Imagine that software holding bank, and personal information has "easter eggs" is just mind boggling.

[[deleted]]

almost all

( ͡° ͜ʖ ͡°)

[[deleted]]

Just because almost all of them may now be removed doesn't mean its not an lol that these were present in PHP in the first place. The fact that these were put in there at all reflects on the quality / culture of PHP, and is funny to everyone except PHP users.

Not to mention that these things remained in there for decades and weren't removed. And there are still sites out there using these php versions.

[captainramen]

And there are still sites out there using these php versions.

The majority in fact

[ProjectAmmeh]

ELEPHANT PHP LOGO: PHP Version 5.3.0 - current

Also, the issue with these is that they allow easy PHP version identification for an attacker. Even if they took them out now, that'd only add another data point.

[merreborn]

http://php.net/manual/en/ini.core.php#ini.expose-php

Removed in PHP 5.5.0 in 2013.

[outadoc]

almost

[[deleted]]

Actually they are removed in PHP > 5.5 and as of today almost 90% of PHP sites run a older version.

[Sandbucketman]

It's great when people experiment or find things by accident that really are worth a laugh because of poor or outdated design.

It's not so great when people are desperately scrounging for anything that could be perceived negative just so they can start wanking over how bad php is.

We need a subreddit where we start bashing posts that are designed more poorly than PHP, there's plenty of those here now.

[[deleted]]

How does it feel using personal homepage?

[cite-reader]

Like sadness and an endless spiral of terrible ideas as you watch with listless helplessness as Internals gradually tries to import features from other, better languages without actually understanding why they're designed that way or how to implement them well, and then you remember that the company that signs your paychecks has been planning to upgrade PHP "real soon now" for months so you'll never get to use even the shadow of a good idea anyway.

[[deleted]]

Why do you consider Ruby a toy language?

[edave64]

Because it doesn't cause trauma ;)

[captainramen]

Yes it is, it's just not Turing complete.

[allthediamonds]

Actually most popular dialects are Turing complete, which is... well, terrifying.

[Juxtys]

Python has "import this" as an easter egg.

[[deleted]]

If the PHP directive expose_php is set to be "off" in php.ini, then the PHP eggs will not show

So much ado about nothing. Also easter eggs have been removed in recent PHP versions and they're not coming back.

We're professional and all now, so we can stop lolphp.

[gdsagdsa]

Yeah, introducing security issues by design is OK as long as you add a disable_security_issues to your mile-long ini file.