News Feed
Jobs Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

ReadyToBeServed.com:
Web Host May Ask Client To Cover Cost Of Hack
August 14, 2006 @ 08:03:39

According to this new article on ReadyToBeServed.com, a flaw in the PHPNuke software allowed a malicious user access to a server to cause all sorts of headaches for both the hosting company and the others hosted on that machine.

A Wellington, New Zealand, Web hosting company may seek compensation from a client that it claims is responsible for the worst hacking attack in the company's history. IServe blames lax security on their client's part for the hacking job that resulted in the defacing of hundreds of Websites.

The hack forced iServe to shut down all its FTP servers for 28 hours, while it replaced many of its customers' websites with back-ups that were made a few days before the incident.

Joy Cottle, iServe's general manager estimates the problem cost about $20,000 to repair. Clients with dedicated servers were not affected by the hack.

They report that the attack happened because of a flaw in the content management system that allowed the user to overwrite websites of other customers on the machine. They are even considering trying to recoup some of the costs from the customer that allowed it to happen. The hole was one found in the older version of PHPNuke the customer had uploaded.

Due to the incident, iServe is now considering banning cleints from running PHPNuke
0 comments voice your opinion now!
hack phpnuke security hole overwrite ban hack phpnuke security hole overwrite ban


blog comments powered by Disqus

Similar Posts

The Register: PHP apps: security's low-hanging fruit

MelbourneChapter.net: PHP and Authentication Security

Chris Shiflett's Blog: CakePHP Visits New York

Zend Developer Zone: How to avoid Identity Theft in Zend Framework with Zend Auth

SitePoint PHP Blog: Evaluating PHP Applications


Community Events











Don't see your event here?
Let us know!


series introduction security hhvm symfony2 application facebook language podcast release package opinion component hack unittest composer install framework performance database

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework