posted 08/28/2008 by Chris
Comments: 0

According to US-CERT, the attack appears to rely on stolen SSH keys to gain access to a system. It then uses a local kernel exploit to gain root access, whereupon it installs the "phalanx2" rootkit, derived from the older "phalanx" rootkit...

posted 03/8/2008 by Chris
Comments: 0

Encrypting a password using the md5 algorithm is so easy that you really have no excuse not to use it for saving passwords into your database...

posted 03/7/2008 by Chris
Comments: 0

While regular expressions are often used for input validation, I also find them very useful for cleaning malicious code in user input.  For this I used the function preg_replace.  The idea is that I only allow certain characters through...

posted 03/4/2008 by Chris
Comments: 0

Any input that you get from a user should be cleaned for malicious code.  Here are some simple functions that will help...

Tags: security, php, code