Web Hosting Fan » hacker

PHP and Normal Web Hosting Security Problems

gracechen — Thu, 19 Aug 2010 06:51:08 +0000

The more normal to even more abnormal security problems on the internet are usually the effects of a lazy programmer that has left a loop hole unchecked somewhere. A lot of the time the web designers do not have that much time to get their project finished in the proper manner, therefore the security is most likely one of the last issues on their mind. This is why many of the ensuing problems are not noticed until they have caused a serious problem in the network of the program. There are various different solutions to preventing such a problem form occurring on your site.

PHP

One of the newer type of programming dialects that is getting more and more widespread among all of the new ones is PHP. PHP is most likely the simplest to use of all of the other dialects, because of this it is probably misused more and more by the less experienced web programmers to eliminate time which in turn expedites the process but leaves it faulty. PHP’s overwhelming simplicity and the little amount of learning that it takes makes the room for there to be many different insecurities in the software that is created.

Unsure Web Apps

Phishing techniques, identity theft, and any other way to mess up the the security server for an operating system are techniques used by hackers trying to get into a network. Nowadays the main concern of web hackers is getting into the administrative interface of someones website to have the ability to get into online databases and server files. Most web applications have loopholes and this is probably the most simple way for hackers to infiltrate the site. Though web applications make the work of a webmaster much simpler with the least amount of hassle, there is a price as there is with just about any tool that makes the work easier.

Looking for Your Own Workers

Because web applications all have direct accessibility to ones site administrative functions, the applications can be used for many different atrocious acts, and also have direct access to the control panel of your sight. For an online business owner, this could ruin their business. To avoid this situation try to not use any new web applications that come from an unreliable source. Instead of using a web application for an over populated site, try using a personal developer that is qualified better for assisting you in making custom web applications.

Conclusion

Though the PHP dialect is very quick and efficient there are still many flaws if not used properly or not used by the right person. If the proper steps are take then the end result should be suitable to fit the users needs.

The Basics of a Rootkit

gracechen — Tue, 15 Jun 2010 16:17:25 +0000

One of the unfortunate problems with running or using an unmanaged dedicated server is fixing potential security threats. While spam blockers, anti-virus and spyware software will mostly automate this process, there are processes running in the background that may be undetected by conventional software that could be trying to hack the server. Therefore it’s beneficial to familiarize oneself with all security aspects to eliminate these malicious threats.

What is a Rootkit?

One of these issues commonly found within dedicated servers is the rootkit. A rootkit is a piece of software designed by hackers that attempts to take full control of the server without proper access or authorization. Utilizing the rootkit program, the hacker can install drivers, kernel modules, malware or take other types of threatening steps to cause havoc within the server.

The primary issue with a rootkit is that it’s usually undetected by traditional security software so once the hacker takes control, it can be a complete shock and cause major problems. The program also allows for Trojans, commands and other type of harmful viruses to be uploaded.

How does a Rootkit Work?

The general procedure is that once a rootkit uploads hidden utility programs into a system, they open a backdoor to the dedicated server. This can be at any time of day and can be extremely harmful to both the software and equipment.

Solution

It’s always recommended that those without networking knowledge or that are not technically savvy should invest in either Information Technology personnel or a managed hosting service. The latter being a much more economical option. Both the personnel and managed hosting service can provide insight as to the best methods for monitoring and blocking all security threats including uploading rookits.

One of the basic security checks by professionals is for the existence of a rootkit on a server. Keep in mind, a good dedicated server hosting provider does not want the server to go down as it’s bad for business. Most providers offer some type of managed hosting for an extra cost to keep the client satisfied.

Rootkits and the programs they upload can be extremely harmful to the software and hardware within a server. With some many security threats available and hackers’ one step ahead of the software, it’s beneficial to have professionals monitoring the server as often as possible. With managed hosting being the most viable option, this will guarantee proper server maintenance and monitoring.

Popular Programming Security Risks

gracechen — Mon, 15 Feb 2010 18:25:48 +0000

Most of the security risks on the internet today are the result of faulty programming and exploitable code. Many developers do not place security high on their list of priorities, as they’re often rushed for deadlines that they must meet in order to finish a paid project. Sadly, most of the security flaws within their programs are not discovered until the flaw has been exploited and the program is the cause of a compromised site or network. Of all the programming types, PHP is the most common, and is said to be the most useful. PHP is also easier to use than any other programming tool, and as the popularity of PHP programming increases, more new programmers are becoming interested in using PHP. This influx of inexperienced programmers designing web applications has resulted in an internet full of unsafe websites.

Web Applications and Security

Web applications enhance the functionality and productivity of websites in a variety of ways, and have therefore become very popular amongst website owners. Unfortunately, website owners don’t realize how much of a risk they’re taking by installing and using these applications. Web applications are installed directly into your control panel, which makes them part of a your administrative interface. If a hacker can gain access to your user interface, they can basically do whatever they’d like with your website, including deface it with questionable or inappropriate content. In fact, some web applications are designed by hackers specifically for this purpose. Before you install a web application you should make sure it is from a reliable source, and only install applications that are absolutely necessary towards the progress of your site. If possible, try to work with professional developers to have your own web applications made.

BruteForce

Another way hackers can gain access to your administrative interface is by sending requests to your website’s server repeatedly in order to receive certain information. Many times this information will be something as simple as a password or nickname. They use the information returned to see if they’re guessing the right password without having to wait for a long time. This method is incorporated into hacking programs called Bruteforce programs. These programs repeatedly input information into your sites login fields, in order to guess a correct username and password.

Since the process is done remotely, the hacker will need to know when they have successfully logged in to the account in order for the program to stop sending information. If they fail to realize they are logged in, then the program will continue sending login information which will reverse their success. Hackers avoid this pitfall by getting your site to send them a line of code when they have successfully penetrated the user area of the site. To prevent this from happening you’ll need to change a few settings in your administrative interface to restrict HTTP requests from unknown sources. You can also limit the amount of requests per a certain time frame, to stop the Bruteforce program from receiving information from your website repeatedly.

Post Nuke vs. PHP Nuke: CMS Platforms Ready to “Nuke” it Out

gracechen — Mon, 14 Sep 2009 17:23:47 +0000

The Post Nuke CMS is quite similar to the more mature PHP Nuke. While it is indeed a fork of PHP Nuke, the core code has been replaced entirely with the aim of creating a more stable and secure environment. The comparison of these two applications has made for a rather controversial subject among fans of both systems. Let’s take a closer look to see how Post Nuke matches up against the CMS from which it borrows so many characteristics.

Post Nuke Advantages

When it comes to displaying publicly accessible information, the efficiency of PHP Nuke is second to none on the open-source CMS market. It is also more extensible through a much larger number of add-on modules. These are major benefits, but the features of Post Nuke give it some advantages that make the system a worthy competitor to PHP Nuke. Post Nuke offers a comprehensive and detailed user permissions systems that allows administrators to restrict access to each module and area of a website to specific users or groups. It lets you add users to a single or multiple groups to delegate a wide range of complicated permissions with relative ease. These capabilities can really come in handy if you require lower level administrators, moderators and other users to aid in managing your site but still wish to limit access.

Post Nuke Disadvantages

Post Nuke definitely has some advantages over PHP Nuke but its disadvantages could be far more noteworthy. Unfortunately, this CMS often appears to trapped as a prisoner of its own rapid development. Post Nuke has evolved so quickly and changed so frequently that the backwards compatibility has been broken, thus making the platform difficult for even the most experienced webmasters to keep up with. This lack of compatibility coupled with circling rumors of its development being cancelled has resulted in a large number of users turning back to PHP Nuke in favor of its outstanding community support, vast selection of modules and greater probability of ongoing development. One of the biggest knocks on Post Nuke has been community support that at times has seemed non existent.

The Security Aspect

Many supporters have made the argument that Post Nuke is a more secure CMS than PHP Nuke. However, independent tests show that a determined hacker will likely have a more difficult time cracking into PHP Nuke opposed to Post Nuke. The results of one test in particular showed that hackers spent nearly five minutes successfully hacking into a PHP Nuke website while compromising a Post Nuke site in as little as 20 seconds. Although this five minutes might not cause you to sleep any more comfortably at night, it does indicate that users could have a false sense of security in regard to their belief that Post Nuke is a more secure solution.

Post Nuke and PHP Nuke both have their advantages and disadvantages. At the same time, both are very capable and can be made adequately secure with the right configurations. Perhaps the best way to decide which is best would be to visit the sites for both projects to learn more about how they can meet your website needs.

The Potential Dangers of Web Services

gracechen — Fri, 04 Sep 2009 19:31:16 +0000

Web services are vital components for connecting internet users with the back-end data of a website. At the same time, they also create a number of entry points that a hacker can use to gain illegal access to a website or server. These potential security flaws must be addressed immediately in order to prevent a broad range of attacks from occurring. Below are just a few of many exploits you need to be concerned about:

Buffer Overflows

When successfully exploited, web services can be used to aid various types of buffer overflow attacks, which often results in a data corruption, DOS (Denial of Service) attacks and the execution of malicious code. A crafty attacker can assemble XML data that forces the markup language to repeatedly call upon itself and dramatically increase in size. The result is a memory overflow or error message that reveals details about the application to the attacker. A similar attack involves sending a block of data to an application stored in an overflown buffer. From here, legitimate data can be overwritten and result in a function return that gives the hacker complete control of the malicious code they inserted in the data block.

XML Injection

The successful exploitation of web services can also result in XML injection, which can lead to data theft and deletion, the remote execution of malicious code and schema poisoning. The most common form of XML injection is known as SQL injection, a devastating technique that exploits improperly validated data through SQL queries. When left vulnerable, a simple web form can provide a hacker with access to sensitive data and allow them to execute malicious code that compromises the entire server.

Another common example of XML injection is a method called schema poisoning. Schema files contain vital preprocessor details an XML parser needs to comprehend grammar and structure. An attacker can damage a schema or replace it with a modified version, thus allowing the parser to process malicious messages or harmful XML files and insert dangerous OS commands into the database or web server.

Session Hijacking

If a hacker can exploit web services, they can stir up a lot of trouble through a malicious technique known as session hijacking. This practice refers to gaining unauthorized control of an authorized user’s session state by sniffing or intercepting session data. Session hijacking can give an attacker access to a valid session ID and allow them to enjoy whatever privileges the legitimate user has within the application. Once they have been validated as an authentic user, the attacker can perform a wide range of dangerous activities on the system.

Conclusion

Web services provide an easy way for many different technologies to interact and communicate with each other. Due to their increasingly popularity and natural functionality, they present a huge risk to the web servers and applications hosting them. While the concern has been raised among security teams and developers, awareness has not been increased enough because web services continue to lead to website exploits and compromised data at an alarming rate.