{"success":true,"security_score":43,"assessment":"Poor security - immediate attention required","checks":{"php_version":{"current":"8.3.6","secure":true,"message":"PHP version is secure"},"https":{"secure":true,"message":"HTTPS is enabled"},"headers":{"X-Frame-Options":{"present":false,"expected":"DENY","message":"Missing security header: X-Frame-Options"},"X-Content-Type-Options":{"present":false,"expected":"nosniff","message":"Missing security header: X-Content-Type-Options"},"X-XSS-Protection":{"present":false,"expected":"1; mode=block","message":"Missing security header: X-XSS-Protection"},"Strict-Transport-Security":{"present":false,"expected":"max-age=31536000","message":"Missing security header: Strict-Transport-Security"},"Content-Security-Policy":{"present":false,"expected":"default-src","message":"Missing security header: Content-Security-Policy"}},"file_permissions":{"db_config.php":{"permissions":"0640","secure":true,"message":"File permissions are secure"},"db.php":{"permissions":"0644","secure":true,"message":"File permissions are secure"},".htaccess":{"permissions":"0644","secure":true,"message":"File permissions are secure"}},"exposed_files":{"config.php":{"exists":true,"secure":false,"message":"Configuration file exists and may be exposed"}},"error_reporting":{"display_errors":"","secure":false,"message":"Error reporting is enabled in production"},"session_security":{"cookie_httponly":"","cookie_secure":"0","use_strict_mode":"0","secure":false,"message":"Session security needs improvement"}},"vulnerabilities":["Missing security header: X-Frame-Options","Missing security header: X-Content-Type-Options","Missing security header: X-XSS-Protection","Missing security header: Strict-Transport-Security","Missing security header: Content-Security-Policy","Potentially exposed configuration file: config.php","Error reporting is enabled in production","Session security is not properly configured"],"recommendations":["Add X-Frame-Options header to your .htaccess or server configuration","Add X-Content-Type-Options header to your .htaccess or server configuration","Add X-XSS-Protection header to your .htaccess or server configuration","Add Strict-Transport-Security header to your .htaccess or server configuration","Add Content-Security-Policy header to your .htaccess or server configuration","Move configuration files outside web root or protect with .htaccess","Disable error reporting in production environment","Enable session.cookie_httponly and session.cookie_secure"],"timestamp":"2026-08-31 02:34:45","scan_duration":0.003278017044067383}