It may seem like a harmless debugging tool, with a bunch of boring config values and version numbers, but phpinfo() is a goldmine of sensitive data - even when it's "protected" in an admin account! 😈
https://securinglaravel.com/security-tip-dont-use-phpinfo/#Laravel