CIACTech08-001: Understanding PHP Exploits


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) CIACTech08-001: Understanding PHP Exploits
# 1  
Old 02-05-2008
CIACTech08-001: Understanding PHP Exploits

Many websites use the PHP programming language to build web pages on the fly from individual files and from values obtained from a database. PHP based websites are widely used to create Wikis such as MediaWiki used for Wikipedia. If the PHP programs that generate the web pages are not carefully crafted to check user input before it is used, an intruder could inject code into a page and get it executed.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. UNIX Desktop Questions & Answers

for loop (001 to 500)

hey, how do i create a for loop that runs for i from 001 to 500 ? i need that the zero prefix will remain so when i print "i" it will look like so: 001 002 . . 008 009 . . 058 059 . . 500 please advise. (2 Replies)
Discussion started by: boaz733
2 Replies

2. Shell Programming and Scripting

How can get the value 001 using shell script

Hi Gurus, Please help in this shell script. x=000 y=`expr $x + 1` echo $y which gives me the value as 1 How can i get the value as 001 in this shell script. As i am new to scripting stuck up here. Requesting here help here (2 Replies)
Discussion started by: nmadhuhb
2 Replies
Login or Register to Ask a Question
PHP-FPM(8)							Scripting Language							PHP-FPM(8)

NAME
php-fpm - PHP FastCGI Process Manager 'PHP-FPM' SYNOPSIS
php-fpm [options] DESCRIPTION
PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. This is a variant of PHP that will run in the background as a daemon, listening for CGI requests. Output is logged to /var/log/php-fpm.log. Most options are set in the configuration file. The configuration file is /etc/php-fpm.conf. By default, php-fpm will respond to CGI requests listening on localhost http port 9000. Therefore php-fpm expects your webserver to forward all requests for '.php' files to port 9000 and you should edit your webserver configuration file appropriately. OPTIONS
-C Do not chdir to the script's directory --php-ini path|file -c path|file Look for php.ini file in the directory path or use the specified file --no-php-ini -n No php.ini file will be used --define foo[=bar] -d foo[=bar] Define INI entry foo with value bar -e Generate extended information for debugger/profiler --help -h This help --info -i PHP information and configuration --modules -m Show compiled in modules --version -v Version number --prefix path -p Specify alternative prefix path (the default is /usr) --fpm-config file -y Specify alternative path to FastCGI process manager configuration file (the default is /etc/php-fpm.conf) --test -t Test FPM configuration file and exit If called twice (-tt), the configuration is dumped before exiting. --zend-extension file -z file Load Zend extension file FILES
php-fpm.conf The configuration file for the php-fpm daemon. php.ini The standard php configuration file. SIGNAL
Once started, php-fpm then responds to several POSIX signals: SIGINT,SIGTERM immediate termination SIGQUIT graceful stop SIGUSR1 re-open log file SIGUSR2 graceful reload of all workers + reload of fpm conf/binary SEE ALSO
The PHP-FPM website: http://php-fpm.org For a more or less complete description of PHP look here: http://www.php.net/manual/ A nice introduction to PHP by Stig Bakken can be found here: http://www.zend.com/zend/art/intro.php BUGS
You can view the list of known bugs or report any new bug you found at: http://bugs.php.net AUTHORS
PHP-FPM SAPI was written by Andrei Nigmatulin. The mailing-lists are highload-php-en (English) and highload-php-ru (Russian). The PHP Group: Thies C. Arntzen, Stig Bakken, Andi Gutmans, Rasmus Lerdorf, Sam Ruby, Sascha Schumann, Zeev Suraski, Jim Winstead, Andrei Zmievski. A List of active developers can be found here: http://www.php.net/credits.php And last but not least PHP was developed with the help of a huge amount of contributors all around the world. VERSION INFORMATION
This manpage describes php-fpm, version 5.4.4-14+deb7u14. COPYRIGHT
Copyright (C) 1997-2009 The PHP Group Copyright (c) 2007-2009, Andrei Nigmatulin This source file is subject to version 3.01 of the PHP license, that is bundled with this package in the file LICENSE, and is available through the world-wide-web at the following url: http://www.php.net/license/3_01.txt If you did not receive a copy of the PHP license and are unable to obtain it through the world-wide-web, please send a note to license@php.net so we can mail you a copy immediately. The PHP Group 2009 PHP-FPM(8)