Scan flags items already addressed

Hi,
Apparently, this is what the system reports through the ini_get() function https://www.php.net/manual/en/function.ini-get.php

They may be overwritten by your server settings. Can you create a file on your WordPress root and add the following lines:

<?php
   phpinfo();
?>

Then call the file through your domain and notice the values for the following directives:
– expose_php
– display_errors

You should see 2 columns, the Local Value and Master Value.

Thanks

Sorry missed your reply. Here are the values for local and master:

expose_php On On

display_errors Off Off

And here is what the plugin shows:

PHP display_errors

The display_errors is ON.
To fix this security issue, change the php.ini:
display_errors = "off"
or within .htaccess:
php_flag display_errors off
or within wp-config.php:
ini_set("display_errors", "0");.

PHP expose

The expose_php is ON. To fix this security issue, change the php.ini:
expose_php = "off"
or within .htaccess:
php_flag expose_php off.

And what I have I have in my php.ini file:

expose_php = off

And what I have in my .htaccess file:

ini_set(‘display_errors’,’Off’);

ini_set(‘error_reporting’, E_ALL );

define(‘WP_DEBUG’, false);

define(‘WP_DEBUG_DISPLAY’, false);

Thanks

Update, not sure what I did or changed but now your plugin and phpinfo both show off so I would consider this resolved.