Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A vulnerability list for my project's PHP version. The client would rather not upgrade the PHP version to the last version. Also, it's quite probable that some code will break after the switch from 5.1.6 to 5.3.0. There are, however, two problems I face:

  • Some vulnerabilities can't be soved with code, they can be solved only be recompiling php with the fixes; I'm forced to rewrite the code to avoid them
  • I can't seem to find PoC(proof of concept) for most of the vulnerabilities; how can I know I've fixed them/where the problem is, precisely?

Any advice is greatly appreciated.

share|improve this question
Give me the link to your website and ill check your security for you :-) – user11840 Jul 31 '12 at 21:10
up vote 2 down vote accepted

Upgrading and re-writing some of the code will be the most secure way to address vulnerabilities. Depending on how your application is being accessed you could look at a few different perspectives.

If this is accessed externally on the Internet, I would assume that the users would be within a specific geographic scope. Ex. Site in Florida for a local company with local products. You could block all International traffic since it would not be needed.

If it's an internal intranet application then just monitor the network for anyone doing anything fishy.

If it's on the Internet with International exposure as a requirement, keep everything updated and patched because you are going to get scanned.

share|improve this answer

You might see if you can mitigate some of the risks with mod_security

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.