iDevAffiliate affiliate software provides affiliate program software to start affiliate tracking. It is protected by ioncube which makes it quite hard to audit the code for vulnerability.
It is the point of entry for an attack which culminated in a php shell being uploaded, reflected in HTTP logs.
Unfortunately I am not able to easily replace or disable the software. I am wondering if I can "brick" it so that it can be effectively "jailed" in place.
Can php applications be chrooted?