Skip to main content

Posts

Increase server security using Linux Malware Detect ( LMD )

Linux Malware Detector(LMD) Introduction LMD or the Linux Malware detect is yet another useful software application form RfxNetworks , it has been prepared keeping the specific share hosting requirements and malware scenario in mind. RfxNetworks Defines is at follows : Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that is actively being used in attacks and generates signatures for detection. The author of LMD declares the limited availability of existing open source free tools for Linux system that focus on malware detection as the driving force behind making this software. The shared hosting environment has its own dynamics and LMD targets this specific environment considering the specific features of shared hosting. There are so many new malware coming ...

Hardening PHP Configuration

Hardening PHP Configuration When it comes to security, ignorance is definitely not blissful. There are several methods to increase the security of your PHP environment. In this article I will discuss how to secure PHP by hardening PHP 5 configuration. 1. allow_url_fopen  ( enabled by default ) This directive allows PHP's file functions ( file_get_contents, include and require statements ) to retrieve data from remote locations, like FTP or HTTP. If an attacker can manipulate the arguments to those functions, they can use a URL under their control as the argument and run their own remote scripts. The vulnerability is called Remote file inclusion or RFI. ; Disable allow_url_fopen in php.ini for security reasons allow_url_fopen = Off The setting can also be applied in apache's httpd.conf : # Disable allow_url_fopen for security reasons php_admin_flag allow_url_fopen Off It prevents URLs from being used in PHP. A command like include ("http://...