...

View Full Version : Web Site Security



jlhamma
03-17-2010, 11:25 PM
Can anyone recommend a web site security program?
Site is hosting a database and written in php. Would like capability of securing various pages differently, login, ip tracking, user tracking, etc.
Something not as complex as phpSecureSite.

tran1986
03-23-2010, 04:24 AM
We've been hacked, on our shared linux servers hosted by both 1&1 and HeartInternet (yes we do realise we are the only common link between these) however I've been stunned by the indifference of both of these providers to and the lack of security support they've provided.

We had an infection of the Trojan "Backdoor.PHP.C99Shell.w" which appears to have been planted by SQL script injection ( don't know how.... wish I knew how to prevent it in future).

So. ...

Does anyone know of security (anti virus etc) software I can run remotely on my shared service to make sure everything's clean.
Are there any apps I can run all the time to detect this sort of thing(you'd think 1&1 and HeatrInternet would do this wouldn't you)
How do I avoid a repeat performance (given that we already have all the latest updates of all the apps we use installed).

MattF
03-23-2010, 04:29 AM
Does anyone know of security (anti virus etc) software I can run remotely on my shared service to make sure everything's clean.

ClamAV.



Are there any apps I can run all the time to detect this sort of thing(you'd think 1&1 and HeatrInternet would do this wouldn't you)

Your host can't protect you against insecure|sloppy code. Only you can do that.



How do I avoid a repeat performance (given that we already have all the latest updates of all the apps we use installed).

Do a search for 'sql injection'.


Edit: Btw, you really ought to start your own thread instead of hijacking someone elses thread.



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum