Comments on: PHPit hacked? Never! http://phpit.net/article/hacked/ PHPit has dozens of PHP articles, codesnippets and FAQ's. Mon, 12 Nov 2007 21:26:15 +0000 http://wordpress.org/?v=2.0.4 by: Arnold Daniels http://phpit.net/article/hacked/#comment-1138 Thu, 13 Apr 2006 16:38:49 +0000 http://phpit.net/article/hacked/#comment-1138 May I point out that this also means that your host has a security leak on your server. You could simply write a PHP file to readout the root password and TAKE OVER THE WORLD!!!... ehhh... I mean take over the server. You should realy mention to you host that he sould not run apache as root and/or change the privileges on the server so dirs outside the webroot can't be accessed by www-data (the default apache user). Regards, Arnold Daniels http://www.helderhosting.nl May I point out that this also means that your host has a security leak on your server. You could simply write a PHP file to readout the root password and TAKE OVER THE WORLD!!!… ehhh… I mean take over the server.

You should realy mention to you host that he sould not run apache as root and/or change the privileges on the server so dirs outside the webroot can’t be accessed by www-data (the default apache user).

Regards,

Arnold Daniels
http://www.helderhosting.nl

]]>