Security

Security

ahsan

Sentora Member

OS: Centos 6.5
Version: 1.0.0
Server: vps

Posts: 18
Threads: 1
Joined: Jul 2015
Reputation: 0
Sex: Male

Thanks: 0
Given 2 thank(s) in 2 post(s)

#11

RE: Security

07-15-2015, 12:03 AM

(07-14-2015, 11:53 PM)Ron- Wrote: e

(07-14-2015, 11:37 PM)ahsan Wrote: All
[quote pid='11243' dateline='1436881037']
the websites on the server are run under apache user. And if any account of the user is compromised, The attacker can gain access to all the websites and users on the sentora.
All you need is a back-connect script. And you can change files of any website in any directory or any user.

isn't this protected/locked in by suhosin?
[/quote]

Well, it has suhosin installed. But that is a PHP extension, right? I can see that in phpinfo.
But the problem is not about PHP extensions. It's about file permissions. Hosting accounts are poorly managed.

Find

« Next Oldest | Next Newest »

Messages In This Thread

Security - by Qtech - 07-11-2015, 03:11 AM

RE: Security - by apinto - 07-11-2015, 05:37 AM

RE: Security - by Qtech - 07-11-2015, 10:48 AM

RE: Security - by Dave - 07-11-2015, 03:41 PM

RE: Security - by Qtech - 07-12-2015, 02:14 PM

RE: Security - by ahsan - 07-14-2015, 09:22 PM

RE: Security - by Dave - 07-14-2015, 09:49 PM

RE: Security - by ahsan - 07-15-2015, 12:13 AM

RE: Security - by apinto - 07-15-2015, 12:32 AM

RE: Security - by ahsan - 07-15-2015, 01:23 AM

RE: Security - by apinto - 07-14-2015, 11:02 PM

RE: Security - by ahsan - 07-14-2015, 11:37 PM

RE: Security - by apinto - 07-15-2015, 12:12 AM

RE: Security - by Ron-e - 07-14-2015, 11:53 PM

RE: Security - by ahsan - 07-15-2015, 12:03 AM

RE: Security - by ahsan - 07-15-2015, 01:37 AM

RE: Security - by apinto - 07-15-2015, 02:29 AM

Possibly Related Threads…
Thread	Author	Replies	Views	Last Post
Security update dicussion	Eulogy	1	6 ,449	05-29-2017, 04:58 PM Last Post: Me.B

Users browsing this thread: 5 Guest(s)

Forum