Re: php - inject code into $_SERVER ?
Ole Martin Eide <[email protected]> Tue, 08 Feb 2005 07:26:30 +0100
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
Dave Hull wrote: >We have developed a solution that hopefully will be open sourced in >the next few months. In a nutshell, we have a DHCP server that assigns >non-routable (10.10.x.x) IP addresses to unknown hosts on the network. >These hosts are redirected to a local authentication server via a >simple DNS hack that redirects all requests to a host of our choosing. > >Once users have downloaded an application to their local machine and >we have verified they are fully patched and are pulling updates for >both OS and anti-virus software, we assign them a routable IP for our >primary network and they are free to go whereever they want. > >There are some problems that we have solutions for, but are still >implementing, like what to do for people who hard-code a routable IP >address on their machines, etc. > >I'm sure our solution is not novel, I've seen captive portals in >coffee shops that provide the same functionality. > > Thanks for all answers regarding this subject. :) The use area for something like this will be at a lanparty - it would be really great to finally put an end to all the virii. I guess i'll do some serious thinking and testing. Any other pointers/tips are very welcome :) Regards Ole Martin Eide