Website review httpoxy.org
httpoxy
Generated on March 04 2026 14:28 PM
Old data? UPDATE !
The score is 66/100
SEO Content
Title
httpoxy
Length : 7
Ideally, your title should contain between 10 and 70 characters (spaces included). Use this free tool to calculate text length.
Description
httpoxy is a vulnerability in PHP and CGI web applications that allows remote attackers to proxy requests
Length : 106
Great, your meta description contains between 70 and 160 characters.
Keywords
Very bad. We haven't found meta keywords on your page. Use this free online meta tags generator to create keywords.
Og Meta Properties
This page does not take advantage of Og Properties. This tags allows social crawler's better structurize your page. Use this free og properties generator to create them.
Headings
| H1 | H2 | H3 | H4 | H5 | H6 |
| 1 | 13 | 20 | 6 | 0 | 2 |
- [H1]
- [H2] A CGI application vulnerability (in 2016) for PHP, Go, Python and others
- [H2] Isn’t this old news? Is this still a problem?
- [H2] What Is Affected
- [H2] Immediate Mitigation
- [H2] Ineffective fixes in PHP
- [H2] Prevention
- [H2] How It Works
- [H2] Why It Happened
- [H2] History of httpoxy
- [H2] CVEs
- [H2] Thanks and Further Coverage
- [H2] Contact
- [H2] References
- [H3] PHP
- [H3] Python
- [H3] Go
- [H3] NGINX/FastCGI
- [H3] Apache
- [H3] HAProxy
- [H3] Varnish
- [H3] OpenBSD relayd
- [H3] lighttpd
- [H3] Microsoft IIS with PHP or a CGI framework
- [H3] Hiawatha
- [H3] LiteSpeed Web Server
- [H3] h2o Web Server
- [H3] Other CGI software and applications
- [H3] Summary
- [H3] Don’t Trust HTTP_PROXY Under CGI
- [H3] PHP
- [H3] Network Configuration as Prevention
- [H3] HTTPS
- [H3] Minimal example code
- [H4] What can happen if my web application is vulnerable?
- [H4] <= 1.4.40
- [H4] lighttpd2 (development)
- [H4] PHP
- [H4] Python
- [H4] Go
- [H6] Recommended reading
- [H6] Interesting, but once you’ve mitigated
Images
We found 1 images on this web page.
Good, most or all of your images have alt attributes.
Text/HTML Ratio
Ratio : 58%
Ideal! This page's ratio of text to HTML code is between 25 and 70 percent.
Flash
Terrible, you have Flash content, this mean that for search engines hard to understand your content.
Iframe
Great, there are no Iframes detected on this page.
SEO Links
URL Rewrite
Good. Your links looks friendly!
Underscores in the URLs
Perfect! No underscores detected in your URLs.
In-page links
We found a total of 57 links including 2 link(s) to files
| Anchor | Type | Juice |
|---|---|---|
| Summary | Internal | Passing Juice |
| What Is Affected | Internal | Passing Juice |
| Immediate Mitigation | Internal | Passing Juice |
| Prevention | Internal | Passing Juice |
| How It Works | Internal | Passing Juice |
| Why It Happened | Internal | Passing Juice |
| History of httpoxy | Internal | Passing Juice |
| CVEs | Internal | Passing Juice |
| the Python advisory | External | Passing Juice |
| IANA’s registry of message headers | External | Passing Juice |
| NGINX blog post | External | Passing Juice |
| Apache Software Foundation’s official advisory | External | Passing Juice |
| the 1.4 “header manipulation” documentation | External | Passing Juice |
| Microsoft article KB3179800 | External | Passing Juice |
| hiawatha blog | External | Passing Juice |
| litespeed blog | External | Passing Juice |
| GitHub pull request | External | Passing Juice |
| contact@httpoxy.org | Internal | Passing Juice |
| httpoxy-org repo | External | Passing Juice |
| 1 | Internal | Passing Juice |
| httpoxy Github organization | External | Passing Juice |
| 2 | Internal | Passing Juice |
| Ruby stdlib documentation | External | Passing Juice |
| 3 | Internal | Passing Juice |
| 4 | Internal | Passing Juice |
| 5 | Internal | Passing Juice |
| 6 | Internal | Passing Juice |
| 7 | Internal | Passing Juice |
| contact@httpoxy.org | Internal | Passing Juice |
| Distributed Weakness Filing Project | External | Passing Juice |
| iwantacve.org | External | Passing Juice |
| MITRE, or one of their participating CNAs/vendors/coordinators | External | Passing Juice |
| The CERT vulnerability note - VU#797896 | External | Passing Juice |
| Red Hat advisory | External | Passing Juice |
| NGINX blog post | External | Passing Juice |
| Drupal advisory | External | Passing Juice |
| Fastly advisory | External | Passing Juice |
| Cloudflare blog post | External | Passing Juice |
| Akamai blog post | External | Passing Juice |
| extra | Internal | Passing Juice |
| CC0 | External | Passing Juice |
| my Medium account | External | Passing Juice |
| The PHP documentation manual page for getenv | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| RFC 3875 4.1.18: Protocol-Specific Meta-Variables | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| libwww-perl-5.51 announcement | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| fix applied to Curl | External | Passing Juice |
| since it might become a security problem | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| mitigation in Ruby | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| NGINX mailing list | External | Passing Juice |
| ↩ | Internal | Passing Juice |
| Discussed | External | Passing Juice |
| ↩ | Internal | Passing Juice |
SEO Keywords
Keywords Cloud
header http php httpproxy request vulnerable application cgi proxy environment
Keywords Consistency
| Keyword | Content | Title | Keywords | Description | Headings |
|---|---|---|---|---|---|
| header | 32 |  |
|
|
|
| proxy | 32 | |
|
 |
|
| cgi | 30 | |
|
|
|
| php | 26 | |
|
|
|
| http | 24 | |
|
|
|
Usability
Url
Domain : httpoxy.org
Length : 11
Favicon
Great, your website has a favicon.
Printability
We could not find a Print-Friendly CSS.
Language
Good. Your declared language is en.
Dublin Core
This page does not take advantage of Dublin Core.
Document
Doctype
HTML 5
Encoding
Perfect. Your declared charset is UTF-8.
W3C Validity
Errors : 0
Warnings : 0
Email Privacy
Warning! At least one email address has been found in the plain text. Use free antispam protector to hide email from spammers.
Deprecated HTML
Great! We haven't found deprecated HTML tags in your HTML.
Speed Tips
|
Excellent, your website doesn't use nested tables. |
|
Perfect. No inline css has been found in HTML tags! |
|
Great, your website has few CSS files. |
|
Perfect, your website has few JavaScript files. |
|
Perfect, your website takes advantage of gzip. |
Mobile
Mobile Optimization
|
Apple Icon |
|
Meta Viewport Tag |
|
Flash content |
Optimization
XML Sitemap
Missing
Your website does not have an XML sitemap - this can be problematic.
A sitemap lists URLs that are available for crawling and can include additional information like your site's latest updates, frequency of changes and importance of the URLs. This allows search engines to crawl the site more intelligently.
Robots.txt
https://httpoxy.org/robots.txt
Great, your website has a robots.txt file.
Analytics
Great, your website has an analytics tool.
Google Analytics |
PageSpeed Insights
Device
Categories
Free SEO Testing Tool
Free SEO Testing Tool is a free SEO tool which provides you content analysis of the website.