If php_info is really as dangerous as this article makes it out to be these ‘vulnerabilities’ would be rather easy to scan for.

I think it’s time for a debate though what information is considered secret and what isn’t, and have php_info not reveal the information that is secret and the applications not store their secrets in a location that is not secret.