Re: mambo hacked

"Marvin T. Pascual" <[email protected]> Wed, 23 Nov 2005 09:36:28 +0800
Newsgroups gmane.org.user-groups.linux.philippine.newbies
Organization Q Software Research Corporation
Message-ID <1132709788.3257.1.camel@localhost>
On Tue, 2005-11-22 at 04:42 -0800, alum wrote:
> hi everyone,
> 
> is mambo hackable?, i have installed mambo after weeks of running it,
> somebody installed a folder on my mambo directory, making a dumpsite
> for his files..
> 
> can this be prevented?, i have port 80 only open on my router because
> of my webserver.

- - - < s n i p > - - -

Edit your /etc/php.ini and set your allow_url_fopen to OFF.

HTH.

_________________________________________________________
Philippine Linux Users' Group (PLUG) Newbie Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph