I have a failed check for session.hash_function (no value) but it's PHP 7.4.29 and session.hash_function was removed since PHP 7.1.0. https://www.php.net/manual/en/session.configuration.php#ini.session.hash-function
Adding --php 7.4.29 doesn't change a thing. There is no version check for this rule.
https://github.com/psecio/iniscan/blob/880dede38298adb5a23171e304fe03410260b7e3/src/Psecio/Iniscan/Rule/CheckSessionHashFunction.php
I have a failed check for
session.hash_function(no value) but it's PHP 7.4.29 andsession.hash_functionwas removed since PHP 7.1.0. https://www.php.net/manual/en/session.configuration.php#ini.session.hash-functionAdding
--php 7.4.29doesn't change a thing. There is no version check for this rule.https://github.com/psecio/iniscan/blob/880dede38298adb5a23171e304fe03410260b7e3/src/Psecio/Iniscan/Rule/CheckSessionHashFunction.php