Priteas I have some more PHP hack info the company I work for was attacked again through php overloading our servers memory! They attacked the gnu Joomla 1.5 and I was using a php script so people can submit requests but right now that is down while my cgiemail script is being looked at to make sure it can go up because it has to be executed from the shell and I do not have shell access as of yet. Our technicians said to put in phpseuexec I believe it is called so that you can track what site was being hacked and who the user was. I think PHP is the most insecure language that I know of at this time I would love advice on how to make it more secure. I am not sure if we will even continue to support much php I may suggest using ASP instead.

About time you start reading some of the books and articles about hacking, there are many on the market, so you can learn what tactics are used

I dont find that true peter, anytime I google it (hacks, etc) I always get blocked sites, etc.

Anysites you can recommend even books that we should be aware of as web programmers of php/etc?

Thanks, Regards X

You will get many books on Amazon for example Hacking—The Art of Exploitation by Jon Erickson, The Hacker’s Handbook, The Strategy behind Breaking into and Defending Networks. You may frown upon it as out of date, but even now they are relevant reading.
You said that google return only blocked site what about this sql injection prevention, root hacking prevention (got even some school assignment with this one ) or null byte exploit prevention. The search is about appropriate wording

Ya your right problem is I dont know what to be aware of:

So can you give me a list of terms I should search google and preform prevention in my site:
sql injection prevention
root hacking prevention
null byte eploit prevention
etc

Thanks

• RFI (Remote File Inclusion)
• LFI (Local File Inclusion)
• XSS (Cross Site Scripting)
• Path Disclosure
• Enumeration

I actually get the magazine 2600 it is a hackers magazine but I get it so I know what they are up to I also get a few other hacking magazines sometimes if I see something interesting when I am reading it in the store. I am going to have to get more info on hacking is there like a white-hats guide to hackers?

If you want you can get involved, they are well organized and hold open session. White Hats UK

thank you peter I will have to google for one in the US because I am not part of the UK therefore they won't let me join.

Can you not install CMS es like joomla,drupal or vbulletin ? I guess cost of maintaining and building your website will be less .