I'm looking for someone to secure my customized version of PhpNuke, which recently has been hacked and defaced by script kiddies. Supposed version of PHPNuke is 7.4, not all modules are active (only active modules need to be secured). Note that this version has to be fully patched against known exploits since it's customized, I'm not looking for someone just to upgrade to the latest version. Addionally the coppermine gallery module has to be secured.
1) allow_fopen_url = On
This is a default php setting.
Whether to allow the treatment of URLs (like http:// or ftp://) as files.
It permits the remote execution of php script !
If you don't need to fopen/include remote file, set it to OFF.
2) Disable php method like: system();
3) Install mod_security with anti-SQL Injection regex.
mod_security automatically do a euristic check against malicious GET/POST request.
4) Use the php openbase_dir directive.
5) Chroot Apache
This five rules can help a lot !
But they only remain always perimetral defense.
Fix the code is always the better choice.
Good Luck
Francesco Marasco
Chief Technology Officer
Together Team s.r.l.
Via Torino, 34 - Rende (CS) 87036
Italy
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
