PHP 8.1 or later
The PHP runtime satisfies the minimum version.
Temporary target-host diagnostic
Test deployment safely.
Remove the endpoint afterward.
This endpoint reports capability states only. It does not display secrets, environment variables, absolute paths, session contents, or private configuration.
THIS REQUESTNO FAILURES9 pass · 1 not tested
Required deployment files readable
The public shell, application bootstrap, CSS, JavaScript, and catalog are readable.
Local signup storage writable
A temporary write-and-delete operation succeeded in app/data.
Clean-route rewriting
This endpoint was reached through /hosting-check without the .php suffix.
Security headers emitted
CSP, frame restriction, MIME sniffing protection, and referrer policy are present.
Internal directory protection policy
Server-deny policy files are present for app and canonical internal UAI memory.
JSON content type
HTML mode is active; request ?format=json to test JSON delivery.
Next: Open /hosting-check?format=json.Static assets present
Required local branding and partner artwork are readable.
Compression capability or policy
The runtime has zlib and the deployment contains a mod_deflate policy.
Next: Confirm compression from the hosting response headers when available.UTC clock handling
The diagnostic uses UTC and generates an offset-zero timestamp.
Remove after use
Do not leave diagnostics enabled indefinitely.
Remove hosting-check.php or set IARPG_ENABLE_HOSTING_CHECK to false after collecting target-host evidence. Read the operator procedure.
