Re: Possible My Website was hacked... with PHP... please tell me what this is???

From: Date: Thu, 31 Jul 2003 10:23:26 +0000
Subject: Re: Possible My Website was hacked... with PHP... please tell me what this is???
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-157692@lists.php.net to get a copy of this message
Although this is a very good idea it would only benefit people who had access to their own installation of PHP. Most people are only able to use PHP on a shared server so perhaps wouldn't have access to the php.ini file. > >> > Yeah, definatley reason to explore the possibilities... But this is >> really my own stupid fault it got there in the first place... I had >> an image upload form and I didn't tell it only to accept image/jpeg >> or image/gif >> > > i see this happen quite a lot, both in these lists, and the security > focus ones. is there not something that can be set from a default > install on the php.ini ? make it that by default php only accepts images > / zip files / documents ? it seems to give PHP a reputation for being > very easy to compromise. > > sorry, this probably should be a new post, but this is kinda following > on, so please forgive me :) > > -skate- > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php Randum Ian ian@randumian.co.uk CBDagency Web Consultant http://www.cbdagency.com DancePortalGlobal Webmaster http://www.danceportalglobal.com

« previous php.general (#157692) next »