Re: [PHP] Security Issues - Where to look?

2005-11-08 Thread Paul Waring
On Mon, Nov 07, 2005 at 01:50:59PM -0800, Richard wrote: I've heard that php is not particularly secure, making it problematic if you intend to create a web site with commerce, etc. Is there a particular news group that addresses security issues? I'm looking for some guidlines on ensuring that

Re: [PHP] Security Issues - Where to look?

2005-11-08 Thread Richard Lynch
On Mon, November 7, 2005 3:50 pm, Richard wrote: I've heard that php is not particularly secure, making it problematic if you intend to create a web site with commerce, etc. Is there a particular news group that addresses security issues? I'm looking for some guidlines on ensuring that my

RE: [PHP] Security Issues - Where to look?

2005-11-07 Thread Pablo Gosse
[snip] I've heard that php is not particularly secure, making it problematic if you intend to create a web site with commerce, etc. Is there a particular news group that addresses security issues? I'm looking for some guidlines on ensuring that my site is secure from malicious hackers. [/snip]

Re: [PHP] Security Issues - Where to look?

2005-11-07 Thread Richard Davey
Hi Richard, Monday, November 7, 2005, 9:50:59 PM, you wrote: I've heard that php is not particularly secure, making it problematic if you intend to create a web site with commerce, etc. Is there a particular news group that addresses security issues? I'm looking for some guidlines on

Re: [PHP] Security issues

2004-01-14 Thread memoimyself
Hi Chris, First of all, thanks a lot for sharing your modus operandi with us. On 14 Jan 2004 at 7:32, Chris W wrote: I then verify that every character in the string is with in the ascii range of a space to the ~ which is basically all the characters on the key board. How exactly are you

Re: [PHP] Security issues

2004-01-14 Thread Chris W
[EMAIL PROTECTED] wrote: Hi Chris, First of all, thanks a lot for sharing your modus operandi with us. On 14 Jan 2004 at 7:32, Chris W wrote: I then verify that every character in the string is with in the ascii range of a space to the ~ which is basically all the characters on the key board.

Re: [PHP] security issues on shared servers

2003-02-19 Thread David Feldman
Thanks. Looks like a properly configured safe mode could eliminate a lot of problems. A few follow-up questions: 1. I see in the PHP doc comments a patch for Apache (http://luxik.cdi.cz/~devik/apache/) that runs different virtual hosts as different users. Anyone know anything about it, in

Re: [PHP] security issues on shared servers

2003-02-19 Thread David Feldman
OK, my question #2 below is answered by the docs: Safe mode disabled the backtick operator. But having turned on safe mode on my local test server, I have another question: Suddenly my include statements that user relative paths don't work. For example: include

Re: [PHP] security issues on shared servers

2003-02-18 Thread Jason Sheets
If your hosting provider has enabled safe mode then others can not include scripts that have a different uid than the owner of the current script, that prevents them from including your code. As far as the files go you could checksum them or if you are honestly concerned about them being changed