|
Posted by The Natural Philosopher on 01/14/08 09:12
Jerry Stuckle wrote:
> The Natural Philosopher wrote:
>> C. (http://symcbean.blogspot.com/) wrote:
>>> On 12 Jan, 18:15, firewood...@yahoo.com wrote:
>>>> I am trying to secure sites I am developing, and I am especially
>>>> concerned about intruders gaining command-line access to my sites by
>>>> penetrating my PHP code. I have no idea how someone would do that.
>>>>
>>>> My sites are in a shared hosting environment, and I know that is an
>>>> intrinsically insecure situation. I guess I will just have to live
>>>> with it. However, what methods would someone visiting my site use to
>>>> get to the command line, without having an account on the same server?
>>>> How can I guard against such intrusions?
>>>
>>> These might be helpful as an introduction to PHP security:
>>>
>>> http://www.owasp.org/index.php/PHP_Top_5
>>> http://shiflett.org/
>>> http://www.hardened-php.net/
>>>
>>> But as you observed, with a hosted server, indeed a *shared* hosted
>>> server, you don't have any real security.
>>>
>>
>> At a slight tangent..I looked into hosting, and for the few sites I
>> have developed - low bandwidth,small scale businesses - frankly it was
>> far more cost effective to host them on a properly set up and
>> maintained machine at the end of my broadband line, using a fixed IP
>> address.
>>
>> If any or all of them get to be supremely profitable.high bandwidth,
>> then I will stick my own machine in a hosting center.
>>
>> The 'in between' of actually hosting on a shared machine, seems to me
>> to get less and less attractive.
>>
>> Its better for backups I guess..
>>
>>
>>> C.
>>
>
> What happens when you have a power outage?
Sites down for an hour or two.
Or when your broadband line
> goes down?
Never has. Not for more than an hour.
And what if you're on vacation for two weeks when the system
> crashes and needs rebooting?
>
I have a technical friend to house sit. Its a nice house.
> Hosting centers have backup power and communications, people on site
> 24/7 for emergency work, etc. Hosting hobby sites in your home may be
> fine. But I'd never put a business site there.
>
Well I am on site 24x7 for emmergency work.
I've seen whole ISP's go down for as long as I have been of line.
Risk analysis show I am not that much worse off. If at all.
Navigation:
[Reply to this message]
|