Re: Possible My Website was hacked... with PHP... please tell me what this is???
| From: | Randum Ian | Date: | Thu, 31 Jul 2003 10:23:26 +0000 |
| Subject: | Re: Possible My Website was hacked... with PHP... please tell me what this is??? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-157692@lists.php.net to get a copy of this message | ||
Although this is a very good idea it would only benefit people who had
access to their own installation of PHP. Most people are only able to use
PHP on a shared server so perhaps wouldn't have access to the php.ini
file.
>
>> > Yeah, definatley reason to explore the possibilities... But this is
>> really my own stupid fault it got there in the first place... I had
>> an image upload form and I didn't tell it only to accept image/jpeg
>> or image/gif
>>
>
> i see this happen quite a lot, both in these lists, and the security
> focus ones. is there not something that can be set from a default
> install on the php.ini ? make it that by default php only accepts images
> / zip files / documents ? it seems to give PHP a reputation for being
> very easy to compromise.
>
> sorry, this probably should be a new post, but this is kinda following
> on, so please forgive me :)
>
> -skate-
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
Randum Ian
ian@randumian.co.uk
CBDagency Web Consultant
http://www.cbdagency.com
DancePortalGlobal Webmaster
http://www.danceportalglobal.com