D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Apache security flaw - my website cracked

 

On 2006-07-19T20:28+0100 Theo Zourzouvillys wrote:
> PS: Wordpress has had a fairly bad security history iirc. infact, most PHP 
> applications have a bad security history, because the sort of people who 
> *generally* write PHP code generally don't know the concepts of security.

I package Wordpress for Debian and I can testify that I've seen quite a
few security problems with Wordpress. Wordpress fixes do come quickly,
though those who don't update promptly are at risk.


Many Wordpress folk recommend mod_security. Though I haven't been
bothered to set it up.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html