All Questions
Tagged with shared-hosting php
15 questions
2
votes
1
answer
367
views
Ways to detect CVE-2017-12419 intrusion
I have a free infinityfree.net web server that was vulnerable to CVE-2017-12419 for quite a big window of time.
After fixing the gap and changing the passwords, what are some ways to detect if the ...
CommunityBot
- 1
2
votes
2
answers
3k
views
What is the best file permission for .user.ini in hosting folder?
My hoster placed a .user.ini in my public_html. What is the recommended file permission be? Now it's 644.
- 132k
0
votes
0
answers
49
views
Are these cPanel processes malicious? [duplicate]
I have previously asked a question There's an expect.php file in all the git repositories of my web server, is this malicious? and this question is a further continuation if it.
After investigating ...
- 352
1
vote
1
answer
222
views
Found PHP script with erratic code, htaccess kept resetting even if I change it
When I browse on my hosting account, I found the index.php of my website has some code embedded to it, in the beginning there was really long line containing erratic code. There was also two more ...
CommunityBot
- 1
2
votes
1
answer
281
views
Folder Access restriction in Shared Hosting
In a shared hosting I use (where I don't have access to httpd.conf files) I want PHP files in "MyTargetFolder" to not have ability to access anything in upper directories.
It needs some configuration ...
- 2,737
3
votes
1
answer
3k
views
Will disabling "symlink" in PHP.ini prevent attackers from attacking other websites?
I have a small shared server where couple of websites are hosted, so I'm not sure if this kind of protection will be enough to prevent attackers from executing symlink attack.
I've added symlink to ...
9
votes
5
answers
11k
views
How can a PHP file be added over and over to my hacked site?
I'm on a shared hosting plan (I know, I know) on GoDaddy and all the files in it have been hacked. There are multiple sites in the plan, each of them has a folder. The folders and sub-folders of each ...
CommunityBot
- 1
143
votes
9
answers
34k
views
Hosting company advised us to avoid PHP for security reasons. Are they right?
I'm doing a redesign for a client who's understandably concerned about security after having been hacked in the past. I had initially suggested using a simple PHP include for header and footer ...
CommunityBot
- 1
1
vote
0
answers
67
views
Bizarre php file appeared in the image gallery folder of my website [duplicate]
Can anyone tell what this is or how it could possibly have made it to the image gallery folder of my website? It appears to be a bunch of variable definitions. Mind you that a period "." is the concat ...
- 119
4
votes
1
answer
7k
views
How much of a security problem is PHP's proc_open() on a shared host
My company is developing a PHP system that needs to interact with Git on the server, which can currently most conveniently be done by allowing external calls via proc_open(), system() and the likes. ...
CommunityBot
- 1
2
votes
2
answers
493
views
Is there any security concern to host Wordpress on the main web server?
We have been hosting our Wordpress blog on a Linux virtual box, and our main web application on an IIS server. Our website is www.mainsite.com and the wordpress is on www.blog.mainsite.com.
Now there ...
- 41
1
vote
3
answers
772
views
How to minimise risk to sensitive data in temp files in shared hosting environment before encryption?
openssl_pkcs7_encrypt() requires the data to be encrypted to be read from a file and so unfortunately it requires sensitive data to be written to temporary file before being encrypted.
In a shared ...
- 3,747
2
votes
3
answers
1k
views
MySQL database access prevention
I am doing a PHP website for a client who deals with third party financial information, and he is concerned about the developmers (me) having access to all the information, which is obviously a valid ...
CommunityBot
- 1
2
votes
2
answers
893
views
Can the `system` function pose severe security threats on a shared hosting server?
I recently bought an account from a shared hosting company and I needed the php system function to be enabled for one of my projects.
So I created a ticket and asked them to enable it. This is what ...
- 39.5k
2
votes
1
answer
2k
views
Can /etc/passwd file be accessed on a cpanel shared hosting account?
Given standard server hardening was performed, can the /etc/passwd be accessed by a shared hosting account by using PHP or Perl scripts which is executed from the public_html of the shared account?
- 47.3k