Re: PHP Security
| From: | Jasper Bryant-Greene | Date: | Fri, 26 Aug 2005 05:30:16 +0000 |
| Subject: | Re: PHP Security | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-221399@lists.php.net to get a copy of this message | ||
Santosh Jambhlikar wrote:
also PHP HIT BY ANOTHER CRITICAL FLAW A new security flaw in the PHP Web service protocol used by a large number of Web applications could allow attackers to take control of vulnerable servers. http://www.computerworld.com/securitytopics/security/holes/story/0,10801,104124,00.htmlYou are spreading FUD about PHP. Stop it. If you actually *read* the article carefully you will find that not only is this not a PHP bug, but a bug with two XMLRPC libraries written *for* PHP. Not PHP itself. This is completely irrelevant to the original topic, as I didn't see the OP asking for XMLRPC security advice. While you're at it, why not publish an article "PHP HIT BY ANOTHER CRITICAL FLAW" with the text "A new security flaw in my website, which is developed using PHP, surfaced today..." Jasper