Welcome, Guest. Please login or register.

Author Topic: Threat against Amiga sites?  (Read 40765 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline buzz

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 612
    • Show all replies
Re: Threat against Amiga sites?
« on: December 21, 2010, 05:09:20 AM »
Quote from: Karlos;600312
I was thinking more along the lines of "remote shell" tools, to be honest. There are a few php ones that are notorious.

There sure are. I have to resort to things like

"suhosin.executor.func.blacklist = passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg"

for some users due to their inability to write safe code :/ and things like chroot/per user php processes etc.