D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] PHP security flaw

 

Ben Goodger wrote:
> OK, status report:
> 
> The apache log has no entries for the /wordpress folder from 5am this
>  morning. There are tons of 200s on /ben but zero on /ben/wordpress. 
> There have been no DoS attacks against the server from 11am this
> morning, down from one every five minutes. Although the .htaccess
> does not contain a redirect, anything in /wordpress is redirected to
> scientology.
> 

Forget Apache/htaccess - this is a PHP issue. Check the PHP scripts and
upgrade to PHP5 asap.

-- 

Neil Williams
=============
http://www.data-freedom.org/
http://www.nosoftwarepatents.com/
http://www.linux.codehelp.co.uk/


Attachment: signature.asc
Description: OpenPGP digital signature

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html