From fb0a21c0a28aa7d7488aca4440a60e5d728f2995 Mon Sep 17 00:00:00 2001
From: Hypolite Petovan <mrpetovan@gmail.com>
Date: Sat, 3 Feb 2018 01:26:28 -0500
Subject: [PATCH] Add phpinfo page only accessible to admins

---
 mod/admin.php   |  5 +++--
 mod/phpinfo.php | 16 ++++++++++++++++
 2 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 mod/phpinfo.php

diff --git a/mod/admin.php b/mod/admin.php
index 55a8a78f1c..d7495340b4 100644
--- a/mod/admin.php
+++ b/mod/admin.php
@@ -180,10 +180,10 @@ function admin_content(App $a)
 			'addons'       => ["admin/addons/"      , L10n::t("Addons")               , "addons"],
 			'themes'       => ["admin/themes/"      , L10n::t("Themes")               , "themes"],
 			'features'     => ["admin/features/"    , L10n::t("Additional features")  , "features"] ]],
-		'database' => [ L10n::t('Database'), [ 
+		'database' => [ L10n::t('Database'), [
 			'dbsync'       => ["admin/dbsync/"      , L10n::t('DB updates')           , "dbsync"],
 			'queue'        => ["admin/queue/"       , L10n::t('Inspect Queue')        , "queue"], ]],
-		'tools' => [ L10n::t('Tools'), [ 
+		'tools' => [ L10n::t('Tools'), [
 			'contactblock' => ["admin/contactblock/", L10n::t('Contact Blocklist')    , "contactblock"],
 			'blocklist'    => ["admin/blocklist/"   , L10n::t('Server Blocklist')     , "blocklist"],
 			'deleteitem'   => ["admin/deleteitem/"  , L10n::t('Delete Item')          , 'deleteitem'], ]],
@@ -192,6 +192,7 @@ function admin_content(App $a)
 			"logsview" => ["admin/viewlogs/", L10n::t("View Logs"), 'viewlogs']
 		]],
 		"diagnostics" => [ L10n::t("Diagnostics"), [
+			"phpinfo" => ['phpinfo/', L10n::t('PHP Info'), 'phpinfo'],
 			"probe" => ['probe/', L10n::t('probe address'), 'probe'],
 			"webfinger" =>['webfinger/', L10n::t('check webfinger'), 'webfinger']
 		]]
diff --git a/mod/phpinfo.php b/mod/phpinfo.php
new file mode 100644
index 0000000000..ec2897dc6d
--- /dev/null
+++ b/mod/phpinfo.php
@@ -0,0 +1,16 @@
+<?php
+/**
+ * @file mod/phpinfo.php
+ */
+
+require_once 'boot.php';
+
+function phpinfo_content()
+{
+	if (!is_site_admin()) {
+		return false;
+	}
+
+	phpinfo();
+	killme();
+}