Re: PHP's security??

On Fri, Dec 08, 2000 at 01:14:34AM -0800, William wrote: > Hi I want to install php and database support on my windows NT server. But I > heard there is a big security problem could leads hackers delete all files > on the server and empty the database. > Is this true? this *may* be a reference to the recent bug in error logging - people are still 'discovering' it on bugtraq. php 4.0.3 fixed this bug i believe. i am sure that if it is some other vulnerability, a lot of people (myself included) would be very interested to hear about it. this is the vulnerability page for the error logging bug: http://www.securityfocus.com/vdb/bottom.html?vid=1786 you should take all possible steps to secure your nt server *before* installing php on it, however. far better to have a clean base system first. j. -- .----------+------------------------------------. |John Slee `-----------. <john@chirp.com.au>| |Chirp Web Design | http://www.chirp.com.au| |Phone: +61 2 62301871 `----. +61 2 62301515 Fax| `---------------------------+-------------------'