I'm in the process of setting up a network and it needs a site for users to be accessible on the internet. I keep reading about not having a public server on a local network, domain etc etc. And that it must be in a DMZ.
Now I'm no security expert by any means but say there is a firewall between the internet and the network that was setup "correctly" with the "best" possible security and had one port forward to the internal web server. Assuming also that the web application code (PHP in this case) was also secure and all user passwords where secure, what possible way is there to compromise the system and get internal access to the network?
I understand that a DDOS is possible (assuming you don't have some detection system against that) but such attacks doesn't get you internal access. And in this case its not a big organisation or anything, so a DDOS or smilier is unlikely unless a bot stumbles on our public IP.
What I dont get even more is how can just a plain HTML, CSS and JS site be compromised? PHP and server side code can obviously be a big security risk if it was badly done as it runs on the server. But if properly coded....
I might be blind but I seriously dont understand how well written code, closed ports and a properly setup firewall would allow a system compromise. As far as I see having open ports with ssh, ftp and such are what can allow you to compromise a system.
Hope I'm not beeing a big idiot. :)