[yunyeng]

What kind of information can hackers get from phpinfo() ?

[krapp]

The PHP version will tell them what unpatched vulnerabilities your apps are likely to have.

[smt88]

Isn't that often in the response headers anyway?

[krapp]

Yeah, but you shouldn't be doing that, either.