Author Topic: Protect Against r57shell PHP Exploit (Read 3011 times)

ctwjr · « **on:** September 18, 2006, 09:32:56 AM »

I have been hearing an aweful lot about the r57shell PHP Exploit ruining people\'s sites and even crashing entire servers! I have a Linux server and would like to know what can I do to defend against R57Shell from a server admin perspective?

dynaweb · « **Reply #1 on:** September 18, 2006, 09:54:04 AM »

There are different things that can be done to protect your server. They include:
- php.ini disable_functions = shell_exec,system,proc_open
- mod_security with updated ruleset
- open_basedir restriction
- secured /tmp directories (noexec mount)
To be sure, check with your system administrator.

Author Topic: Protect Against r57shell PHP Exploit (Read 3011 times)

ctwjr

Protect Against r57shell PHP Exploit

dynaweb

RE: Protect Against r57shell PHP Exploit