Your correct its not inline with the guidelines and has nothing to do with
Web Standards what so ever. Why did you post it if you knew that it was
against the standards?

Peter sent out this email last week to everyone, so you have no excuse.

http://webstandardsgroup.org/mail/guidelines.cfm

If you don't agree to this, please unsubscribe yourself from WSG (delete
your membership) and have a nice day. Otherwise, just have a nice day.

Play nice kids, and a HUGE thanks to Russ and the Core team that keep WSG
running.

Peter



On 5/26/07, Bas V <[EMAIL PROTECTED]> wrote:

Hi Guys,

Firstly I do apologise if this posting is not in line with this list's
guidelines.
I'm struggling with a problem and hope that you can give me some advice;

This is my problem story:
My client's website is rather busy with 30,000+ unique visitors each
month.
There are a few feedback/contact forms, forums, surveys, competitions, etc
in use on this php/mySql driven site as well as an on-line shop and
numerous
(mySql) database generated pages.
We have about 12 databases running currently, containing many, many  Mb's
of
data..
Subsequently I'm "paranoid" regarding the security aspects such as hacking
etc

Next to the obvious security measures I have added some extra security by
encrypting the source code of several pages "on the fly" using a very
handy
php include file.

Up to recently this has worked beautifully but since several months we are
getting complains from McAfee anti-virus users as this software is
incorrectly interpreting the source-code encryption as a Trojan(!) on the
site.

I noticed that also Kaspersky Anti-Virus has this problem however this
software offers at least a "this site is ok" button option.

I have contacted McAfee who suggested that I would email them the php
include file so that they could patch their software.
This is now months ago and nothing has changed.
Now they also stopped communicating with me, making me think that the
patching of the software is not going to happen..

I do however not want to remove the encryption or do anything else that
would mean reducing the level of security on the site.


Now my questions to you:
a) Is there a way to detect which anti-virus software is used by a site
visitor so that I can create a auto-generated message for just McAfee
users
that they do not need to worry about the false Trojan warning?

b) Do you have any suggestions for me as how otherwise to very securely
protect/encrypt source code?

Greetings,
Baz




*******************************************************************
List Guidelines: http://webstandardsgroup.org/mail/guidelines.cfm
Unsubscribe: http://webstandardsgroup.org/join/unsubscribe.cfm
Help: [EMAIL PROTECTED]
*******************************************************************




*******************************************************************
List Guidelines: http://webstandardsgroup.org/mail/guidelines.cfm
Unsubscribe: http://webstandardsgroup.org/join/unsubscribe.cfm
Help: [EMAIL PROTECTED]
*******************************************************************

Reply via email to