https://www.icyphoenix.com/viewtopic.php?f=35&t=491
-----------------------------------
borbo
Mon 16 Oct, 2006 15:08

Security Issue
-----------------------------------
Hello there i have some security issues in my site....

Somebody is able  to upload a file named a.php in my public_html folder an then executes it...
Then Thusands of mails are being sent from my mailserver

I' attaching the file...

How can i rescue myself from him?

In the folder i found this script only the owner had write and execute permissions...

Please help me i can't find a solution 

Thanks a lot!


-----------------------------------
difus
Mon 16 Oct, 2006 16:48

Re: Security Issue
-----------------------------------
php.ini register_globals = Off

or

new .htaccess disables register_globals


-----------------------------------
borbo
Mon 16 Oct, 2006 20:36

Re: Security Issue
-----------------------------------
thanks a lot diffus...is this the only thing i have to change?


-----------------------------------
difus
Mon 16 Oct, 2006 21:05

Re: Security Issue
-----------------------------------
[quote user="borbo" post="3873"]thanks a lot diffus...is this the only thing i have to change?[/quote]

delete a.php file  :D


-----------------------------------
borbo
Mon 16 Oct, 2006 21:07

Re: Security Issue
-----------------------------------
where is the php.ini located?

ps. I think that its a file in /etc/apache...or something in a linux box  :shock:


-----------------------------------
difus
Mon 16 Oct, 2006 21:17

Re: Security Issue
-----------------------------------
[quote user="borbo" post="3875"]where is the php.ini located?

ps. I think that its a file in /etc/apache...or something in a linux box  :shock:[/quote]

yes it is in server.if you cannot to edit it

 you can apply new patch from here http://www.icyphoenix.com/dload.php?action=file&file_id=6


-----------------------------------
borbo
Mon 16 Oct, 2006 21:21

Re: Security Issue
-----------------------------------
I think i ve applied all patces exchept htaccess...

I'm uploading htaccess now...

Is there any way to find if my site is vulnerable ?


-----------------------------------
borbo
Mon 16 Oct, 2006 21:22

Re: Security Issue
-----------------------------------
I think i ve applied all patces exchept htaccess...

I'm uploading htaccess now...

Is there any way to find if my site is vulnerable ?


-----------------------------------
difus
Mon 16 Oct, 2006 21:27

Re: Security Issue
-----------------------------------
[quote user="borbo" post="3878"]I think i ve applied all patces exchept htaccess...

I'm uploading htaccess now...

Is there any way to find if my site is vulnerable ?[/quote]


version 058a is secure

read  http://www.phpbbxs.eu/viewtopic.php?t=461


