Re: PHP security
David,
The first thing that I would check is the directory/file permissions on your
web space. If others are posting files there, they must be wide open.
The subject of updating PHP is a little more complex than can be handled in
this forum. You absolutely need to have an ISP that can assist you with
this. In fact, I'm surprised that tou are able to use it at all if the ISP
doesn't support it. How did you install it on the server?
Could you provide a link to the site?
Respectfully,
Steve
"david@bridgemics.co." <webforumsuser@macromedia.com> wrote in message
news:g2jhnb$akv$1@forums.macromedia.com...
>I have posted this question elsewhere by mistake - sorry.
> My ISP says that I most likely have a security hole in my website PHP
> coding.
> My website uses PHP to call pages, overall it was written using
> dreamweaver.
> I am not very familiar with either PHP or Dreamweaver, although I did
> write
> the website, so I have no one else to blame but myself.
> I have had a few rogue websites set up using my webspace. After deleting
> the
> sites and uploading the original files and changing my password they still
> arrived. My ISP says there is most likely a security hole in my PHP coding
> and
> I should apply the most recent patches.
> I don't know/understand how to do this, my ISP doesn't support PHP or any
> website building really.
> I am currently running the most recent version of PHP on my PC, but wasn't
> when I wrote the website. How do I update my web pages to be using this
> most
> recent version of PHP.
> If I only send simple code to my webspace is it not the ISP PHP parser
> that
> needs updating? (This probably shows my lack of knowledge)
> Any help would be gratfuly received.
>
|