Re: Security Support

Grant Peel wrote:

----- Original Message ----- From: "Michael A. Peters" <mpeters@mac.com> To: "Grant Peel" <gpeel@thenetnow.com> Cc: <php-general@lists.php.net> Sent: Sunday, March 29, 2009 10:00 PM Subject: Re: [PHP] Security Support

Grant Peel wrote:

Good Morning / Afternoon, We run several of our own servers: - Dell Power Edge 1U, Pentium, - FreeBSD (6.x soon to be 7.x) - along with all the standard Web Application installation (PHP Apache Exim, Pop3, Proftp, MySQL etc etc). What I am asking here, is if any one in this community has the knowledge to act as a security consultant in an occasional, as required basis. Anyone interested should have expience with Apache, PHP, Perl on the FreeBSD platform.

No experience with FreeBSD and probably not enough with Perl - but whoever you hire, make sure they suggest your php build is hardened by suhosin - both the core php patch and the loadable module.

Hi Again all, I am not sure what to make of all the chatter on this post .... To date, I have not recieved any sincere replies, which is a bit suprising. I am thinking that this job would be easy money for someone who already knows the ins and outs of php/Apache from a secuirty standpoint. I already have sohosin patch applied (it is applied as part of the default FreeBSD - php port). Anyways, the offer is still out there if anyone is interested.

Nobody might have the right mix of skills you require (where-as going for a company if one person doesn't have the skills, someone else can take over). Probably quite a few people here could do the php and bsd but not the perl, or could do the php/perl but no idea about bsd (I fit into that category). -- Postgresql & php tutorials http://www.designmagick.com/