PHP security
I have posted this question elsewhere by mistake - sorry.
My ISP says that I most likely have a security hole in my website PHP coding.
My website uses PHP to call pages, overall it was written using dreamweaver.
I am not very familiar with either PHP or Dreamweaver, although I did write
the website, so I have no one else to blame but myself.
I have had a few rogue websites set up using my webspace. After deleting the
sites and uploading the original files and changing my password they still
arrived. My ISP says there is most likely a security hole in my PHP coding and
I should apply the most recent patches.
I don't know/understand how to do this, my ISP doesn't support PHP or any
website building really.
I am currently running the most recent version of PHP on my PC, but wasn't
when I wrote the website. How do I update my web pages to be using this most
recent version of PHP.
If I only send simple code to my webspace is it not the ISP PHP parser that
needs updating? (This probably shows my lack of knowledge)
Any help would be gratfuly received.
|