1. Phpinfo() page
2. allow_url_fopen

vuls:
phpinfo() was found url:"http://coderchain.cn//back/test.php".
The phpinfo() function exposes a large amount of information about the PHP configuration and your project environment includeding PHP version, server information, paths and so on.
Impact:
expose sensitive information(u may see as the followings).

vuls:
as u can see in "http://coderchain.cn//back/test.php".The PHP configuration "allow_url_fopen" were both "on".
Impact:
Possible data retrieval from remote locations;
Possible Code injection vulnerabilities.

Class:Medium