Posted by J.O. Aho on 12/09/05 09:31

Andy wrote:
> I am new to PHP so need to ask you something. I read some posts in Forums
> that many free php scripts contain a spyware code, so programmers can
> collect your data. For example they can stole collected members e-mail
> addresses or even transaction infos. I read that many hackers download
> freeware scripts than they put a malicious code and than they post it on net
> waiting for their "victims". Please tell me how I can find out if my script
> contains that code ? Where to look for and how this code looks like ? Right
> now what I am doing is testing php scripts by HomeSite program. I check php
> file for all links included in that file. But I noticed that HomeSite can be
> fooled and doesn't show all links.

Run a md5sum on your downloaded source and compare that to the md5sum on the
authors website, if they match then it's safe, else you have downloaded a
modified version.


//Aho

[Back to original message]