php-version
Explanation
Azure App Service web applications developed with the PHP should use the latest available version of PHP to ensure the latest security fixes are in use.
Possible Impact
Old PHP Versions can contain vulnerabilities which lead to compromised Web Applications
Suggested Resolution
Ensure Latest PHP Version is being used
Insecure Example
The following example will fail the azure-appservice-php-version check.
resource "azurerm_app_service" "good_example" {
name = "example-app-service"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
app_service_plan_id = azurerm_app_service_plan.example.id
site_config {
php_version = "7.3"
}
}
Secure Example
The following example will pass the azure-appservice-php-version check.
resource "azurerm_app_service" "good_example" {
name = "example-app-service"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
app_service_plan_id = azurerm_app_service_plan.example.id
site_config {
php_version = "7.4"
}
}