PHP Nuke

[Brett_Tabke]

I've been shown 4 php nuke run sites that have been hacked in the last 24hours.

Are there some unreported holes being exploited?

[SEO practioner]

Hi Brett

Not that I am aware of, but, I guess you never know.

Any sites in particular?

[edited by: jatar_k at 4:00 am (utc) on Mar. 25, 2003]

[DrDoc]

There are always security holes to be exploited, especially if there's a crappy programmer behind the script.

Do you know which version of PHP the exploits were for? And, what kind of exploits? It could just be that the programmer overlooked something, not necessarily a PHP bug...

[eaden]

yes, there was an exploit, even phpnuke.org was hit. In fact phpnuke.org wasn't even patched when the fix was released.

I reccomend www.postnuke.com over php nuke. ( PostNuke was forked from phpnuke a couple of years ago. It is developed by a team of people, whereas phpnuke has one lead developer, and is much less of a team effort. )