Re: Possible My Website was hacked... with PHP... please tell me what this is???
| From: | skate | Date: | Mon, 31 Jul 2000 10:04:44 +0000 |
| Subject: | Re: Possible My Website was hacked... with PHP... please tell me what this is??? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-157691@lists.php.net to get a copy of this message | ||
> > Yeah, definatley reason to explore the possibilities... But this is
> > really my own stupid fault it got there in the first place... I had an
> > image upload form and I didn't tell it only to accept image/jpeg or
> > image/gif
>
i see this happen quite a lot, both in these lists, and the security focus
ones. is there not something that can be set from a default install on the
php.ini ? make it that by default php only accepts images / zip files /
documents ? it seems to give PHP a reputation for being very easy to
compromise.
sorry, this probably should be a new post, but this is kinda following on,
so please forgive me :)
-skate-